{"id":15984818,"url":"https://github.com/phra/crosser","last_synced_at":"2025-03-16T07:32:04.480Z","repository":{"id":34909812,"uuid":"188824335","full_name":"phra/crosser","owner":"phra","description":"A Reflected / Stored / DOM XSS Scanner based on Headless Chrome Node API via Puppeteer","archived":false,"fork":false,"pushed_at":"2023-01-07T05:51:39.000Z","size":1636,"stargazers_count":39,"open_issues_count":16,"forks_count":6,"subscribers_count":4,"default_branch":"master","last_synced_at":"2024-04-23T19:24:29.683Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"https://iwantmore.pizza","language":"TypeScript","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"gpl-3.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/phra.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null}},"created_at":"2019-05-27T10:42:05.000Z","updated_at":"2024-02-03T19:01:10.000Z","dependencies_parsed_at":"2023-01-15T10:14:37.915Z","dependency_job_id":null,"html_url":"https://github.com/phra/crosser","commit_stats":null,"previous_names":[],"tags_count":0,"template":false,"template_full_name":null,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/phra%2Fcrosser","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/phra%2Fcrosser/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/phra%2Fcrosser/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/phra%2Fcrosser/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/phra","download_url":"https://codeload.github.com/phra/crosser/tar.gz/refs/heads/master","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":243806045,"owners_count":20350775,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":[],"created_at":"2024-10-08T02:10:38.319Z","updated_at":"2025-03-16T07:32:04.066Z","avatar_url":"https://github.com/phra.png","language":"TypeScript","funding_links":[],"categories":[],"sub_categories":[],"readme":"# crosser\nA Reflected / Stored / DOM XSS Scanner based on Headless Chrome Node API via Puppeteer\n\n[![asciicast](https://asciinema.org/a/QqM8LcqVyNeXF2oVMlVdPkftN.svg)](https://asciinema.org/a/QqM8LcqVyNeXF2oVMlVdPkftN)\n\n## Installation\n\nInstall it with:\n\n`npm i -g @phra/crosser`\n\nor\n\n`yarn add --global @phra/crosser`\n\n## Usage\n\n```\n$ crosser --help\nA Reflected / Stored / DOM XSS Scanner based on Headless Chrome Node API via Puppeteer\n\nVERSION\n  @phra/crosser/0.2.2-0 linux-x64 node-v9.11.1\n\nUSAGE\n  $ crosser [COMMAND]\n\nCOMMANDS\n  help       display help for crosser\n  reflected  checks for reflected xss\n  stored     checks for stored xss\n\n```\n\n```\n$ crosser reflected --help\nchecks for reflected xss\n\nUSAGE\n  $ crosser reflected\n\nOPTIONS\n  -h, --help     show CLI help\n  -u, --url=url  url to connect\n\nEXAMPLE\n  $ crosser reflected -u \"http://localhost:4200/vuln/\"\n\n```\n\n```\n$ crosser stored --help\nchecks for stored xss\n\nUSAGE\n  $ crosser stored\n\nOPTIONS\n  -a, --post=post  url to connect\n  -b, --pre=pre    url to connect\n  -h, --help       show CLI help\n  -u, --url1=url1  url to connect\n  -x, --url2=url2  url to connect\n\nEXAMPLE\n  $ crosser stored -u \"http://localhost:4200/stored1/\" -x \"http://localhost:4200/stored2/\" --pre \"document.querySelector('#vuln').value = `\u003cPAYLOAD\u003e`; \n  document.querySelector('#button').click();\" --post \"document.querySelector('#button').click();\"\n```\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fphra%2Fcrosser","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fphra%2Fcrosser","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fphra%2Fcrosser/lists"}