https://github.com/pwn0sec/PwnXSS

PwnXSS: Vulnerability (XSS) scanner exploit
https://github.com/pwn0sec/PwnXSS

xss-scanner xss-vulnerability

Last synced: about 1 month ago
JSON representation

PwnXSS: Vulnerability (XSS) scanner exploit

• Host: GitHub
• URL: https://github.com/pwn0sec/PwnXSS
• Owner: pwn0sec
• License: mit
• Created: 2019-11-02T17:27:58.000Z (almost 5 years ago)
• Default Branch: master
• Last Pushed: 2022-12-30T12:17:48.000Z (over 1 year ago)
• Last Synced: 2024-05-13T19:32:46.729Z (4 months ago)
• Topics: xss-scanner, xss-vulnerability
• Language: Python
• Size: 185 KB
• Stars: 704
• Watchers: 27
• Forks: 131
• Open Issues: 12
• Metadata Files:
  • Readme: README.md
  • Funding: .github/FUNDING.yml
  • License: LICENSE

Awesome Lists containing this project

• awesome-hacking-lists - pwn0sec/PwnXSS - PwnXSS: Vulnerability (XSS) scanner exploit (Python)

README

        
   

 


A powerful XSS scanner made in python 3.7


## Installing 

Requirements: 


 BeautifulSoup4 


```bash

pip install bs4

```

 requests 
 


```bash

pip install requests

```

 python 3.7 




Commands:


```bash

git clone https://github.com/pwn0sec/PwnXSS

chmod 755 -R PwnXSS

cd PwnXSS

python3 pwnxss.py --help 

```

## Usage

Basic usage:

```bash

python3 pwnxss.py -u http://testphp.vulnweb.com

```




Advanced usage:

```bash

python3 pwnxss.py --help

```

## Main features

* crawling all links on a website ( crawler engine )

* POST and GET forms are supported

* many settings that can be customized

* Advanced error handling

* Multiprocessing support.✔️

* ETC....

## Screenshot



## Roadmap

v0.3B:

------

 Added custom options ( --proxy, --user-agent etc... )




v0.3B Patch:

------

Added support for ( form method GET ) 


v0.4B:

------

Improved Error handling

Now Multiple parameters for GET method is Supported


v0.5 Release (Final):

------

* Bug fixed

* Now cookies is supported. (--cookie {}) 

## Note

* Sorry for my bad english 

* if you run pwnxss on the win10 terminal you will get an untidy output

* now it doesn't support DOM