π Description: This tool automates the scanning of web applications for Cross-Site Scripting (XSS) vulnerabilities. It injects multiple payloads into URL parameters, sends requests, and analyzes the response to detect if the payload caused an XSS. Results show possible vulnerabilities with URLs and allow saving reports.
Replace the parameter value you want to test with the keyword XSS
.
Example command:
python main.py --url https://example.com/search?q=XSS.
python main.py -u https://example.com/search?q=XSS.
π‘ The tool will:
β
Inject payloads into the specified parameter
β
Send HTTP requests to the target URL
β
Analyze responses for XSS execution
β
Display progress and possible vulnerabilities
β
Prompt you to save vulnerable payload URLs in a report file
π οΈ Author:
SHAYAN, To get this tool, use the @erotools_bot.