https://github.com/haqpl/automate_knoxss

Automation of KNOXSS extension.
https://github.com/haqpl/automate_knoxss

xss xss-detection xss-poc xss-scanner

Last synced: 21 days ago
JSON representation

Automation of KNOXSS extension.

• Host: GitHub
• URL: https://github.com/haqpl/automate_knoxss
• Owner: haqpl
• Created: 2019-03-24T11:30:36.000Z (over 5 years ago)
• Default Branch: master
• Last Pushed: 2019-04-12T10:01:29.000Z (over 5 years ago)
• Last Synced: 2024-08-05T17:38:37.056Z (4 months ago)
• Topics: xss, xss-detection, xss-poc, xss-scanner
• Language: Python
• Homepage: https://haqpl.github.io/Automation-of-KNOXSS-entension-using-Selenium-and-Python
• Size: 39.1 KB
• Stars: 12
• Watchers: 3
• Forks: 1
• Open Issues: 1
• Metadata Files:
  • Readme: README.md

Awesome Lists containing this project

• awesome-hacking-lists - haqpl/automate_knoxss - Automation of KNOXSS extension. (Python)

README

        
# Blog post

https://haqpl.github.io/Automation-of-KNOXSS-entension-using-Selenium-and-Python

# Quick start

1. Install firefox-developer

https://download.mozilla.org/?product=firefox-devedition-latest-ssl&os=linux64&lang=pl

2. `pip install selenium --user` # requires Python

3. Download geckodriver, it should be placed in /usr/bin or add it to PATH

https://github.com/mozilla/geckodriver/releases

4. Download XPI with KNOXSS Pro

http://knoxss.me

### Important

6. Login to http://knoxss.me and retrieve session Cookies, pass them to -c argument.

## Parameters:

1. `-u` or `--url` - defines the target for the scan

2. `-c` or `--cookies` - defines the session Cookies for logged in user to KNOXSS service

3. `-f` or `--firefox` - defines the location of Firefox Developer edition binary

4. `-a` or `--addon` - defines the location of KNOXSS extension directory, unzipped and modified

5. `-t` or `--timeout` - defines the timout for event

### Example usage:

`python3 automate_knoxss.py -u "https://target" -c "wordpress_logged_in_...=...; wordpress_sec_...=...; sucuri_cloudproxy_uuid_...=...; wordpress_test_cookie=WP+Cookie+check;" -f /home/firefox/firefox -a knoxss -t 90`