{"id":19307848,"url":"https://github.com/sarperavci/mxs","last_synced_at":"2025-07-07T03:09:30.936Z","repository":{"id":253103624,"uuid":"834782760","full_name":"sarperavci/MXS","owner":"sarperavci","description":"A powerful asynchronous XSS scanner supporting up to 1,500 concurrent requests.","archived":false,"fork":false,"pushed_at":"2024-08-16T14:04:45.000Z","size":26,"stargazers_count":160,"open_issues_count":1,"forks_count":34,"subscribers_count":5,"default_branch":"main","last_synced_at":"2025-04-13T06:44:01.248Z","etag":null,"topics":["mxs","python","scanner","xss","xss-detection","xss-exploit"],"latest_commit_sha":null,"homepage":"","language":"Python","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":null,"status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/sarperavci.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":null,"code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2024-07-28T10:52:11.000Z","updated_at":"2025-04-09T08:10:06.000Z","dependencies_parsed_at":"2024-11-10T00:12:48.120Z","dependency_job_id":"8a9d8ba9-72c7-4a59-968f-bccb6207124d","html_url":"https://github.com/sarperavci/MXS","commit_stats":null,"previous_names":["sarperavci/mxs"],"tags_count":0,"template":false,"template_full_name":null,"purl":"pkg:github/sarperavci/MXS","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/sarperavci%2FMXS","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/sarperavci%2FMXS/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/sarperavci%2FMXS/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/sarperavci%2FMXS/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/sarperavci","download_url":"https://codeload.github.com/sarperavci/MXS/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/sarperavci%2FMXS/sbom","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":264005221,"owners_count":23542830,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["mxs","python","scanner","xss","xss-detection","xss-exploit"],"created_at":"2024-11-10T00:12:44.322Z","updated_at":"2025-07-07T03:09:30.911Z","avatar_url":"https://github.com/sarperavci.png","language":"Python","funding_links":[],"categories":[],"sub_categories":[],"readme":"# Mass XSS Scanner (MXS)\n\nAn advanced XSS scanner that utilizes asynchronous requests to scan a large number of URLs quickly and efficiently.\n\n## Features\n\n- Low CPU usage: Utilizes asynchronous requests to scan, consuming less CPU than traditional scanners.\n- Memory efficient: Efficiently handles large wordlists.\n- Fast: Can scan a large wordlist in a matter of seconds.\n- Low false positives: Employs a polyglot XSS payload to minimize false positives.\n\n## Demo Video\n\n![](https://cdn.sarperavci.com/cJnVRnYy/CZuIEt.gif)\n\n## Installation\n\nInstall the required dependencies:\n\n```bash\npip install -r requirements.txt\n```\n\n## Usage\n\nBasic usage:\n\n```bash\npython3 MXS.py -i \u003cinput_file\u003e -c \u003cconcurrency\u003e -o \u003coutput_file\u003e -t \u003ctimeout\u003e\n```\n\nExample:\n\n```bash\npython3 MXS.py -i wordlist.txt -c 1500 -o results.txt -t 15\n```\n\nThis will scan the `wordlist.txt` file with a concurrency of 1500, a timeout of 15 seconds, and save the results to `results.txt`.\n\n### Options\n\n- `-i` or `--input`: Specify the input file containing URLs for scanning.\n- `-c` or `--concurrency`: Set the number of concurrent requests to be made.\n- `-o` or `--output`: Define the output file for storing the results.\n- `-t` or `--timeout`: Set the timeout duration (in seconds) for each request.\n- `-p` or `--payload`: Specify a file that contains a custom payload.\n- `-x` or `--hidden`: Suppress domain names in the terminal output.\n- `-h` or `--help`: Display the help message.\n\n## What's Next?\n\n[Planned features](https://github.com/sarperavci/MXS/issues/7)\n\n## Notes\n\nIf you are experiencing issues with concurrency, you can try reducing the number of concurrent requests or increasing the timeout. For example, with a download speed of 300 Mbps, using a concurrency of 1500 and a 15-second timeout typically yields optimal results\n\n## Contributing\n\nIf you want to contribute to this project, feel free to fork it and submit a pull request. It will be reviewed as soon as possible and merged if it is a good fit for the project.\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fsarperavci%2Fmxs","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fsarperavci%2Fmxs","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fsarperavci%2Fmxs/lists"}