https://github.com/menkrep1337/XSSCon

XSSCon: Simple XSS Scanner tool
https://github.com/menkrep1337/XSSCon

python3 vulnerability-scanners xss-scanners

Last synced: about 1 month ago
JSON representation

XSSCon: Simple XSS Scanner tool

• Host: GitHub
• URL: https://github.com/menkrep1337/XSSCon
• Owner: menkrep1337
• License: mit
• Created: 2019-05-19T03:05:14.000Z (over 5 years ago)
• Default Branch: master
• Last Pushed: 2019-09-01T02:32:18.000Z (over 5 years ago)
• Last Synced: 2024-08-01T10:17:14.313Z (4 months ago)
• Topics: python3, vulnerability-scanners, xss-scanners
• Language: Python
• Size: 321 KB
• Stars: 206
• Watchers: 9
• Forks: 60
• Open Issues: 14
• Metadata Files:
  • Readme: README.md
  • License: LICENSE

Awesome Lists containing this project

• awesome-bugbounty-tools - XSSCon - XSSCon: Simple XSS Scanner tool (Exploitation / XSS Injection)

README

        


 


A powerful XSS scanner made in python 3.7


## Installing

Requirements: 


 BeautifulSoup4 


```bash

pip install bs4

```

 requests 


```bash

pip install requests

```

 python 3.7 




Commands:


```bash

git clone https://github.com/menkrep1337/XSSCon

chmod 755 -R XSSCon

cd XSSCon

python3 xsscon.py --help 

```

## Usage

Basic usage:

```bash

python3 xsscon.py -u http://testphp.vulnweb.com

```




Advanced usage:

```bash

python3 xsscon.py --help

```

## Main features

* crawling all links on a website ( crawler engine )

* POST and GET forms are supported

* many settings that can be customized

* Advanced error handling

* Multiprocessing support.✔️

* ETC....

## Screenshot



## Roadmap

v0.3B:

------

 Added custom options ( --proxy, --user-agent etc... )




v0.3B Patch:

------

Added support for ( form method GET ) 


v0.4B:

------

Improved Error handling

Now Multiple parameters for GET method is Supported


v0.5 Release (Final):

------

* Bug fixed

* Now cookies is supported. (--cookie {}) 

## Note

* Sorry for my bad english 

* if you run xsscon on the win10 terminal you will get an untidy output

* now it doesn't support DOM