dwisiswant0 / Findom Xss
Licence: apache-2.0
A fast DOM based XSS vulnerability scanner with simplicity.
Stars: ✭ 310
Programming Languages
shell
77523 projects
Projects that are alternatives of or similar to Findom Xss
Offensive Docker
Offensive Docker is an image with the more used offensive tools to create an environment easily and quickly to launch assessment to the targets.
Stars: ✭ 328 (+5.81%)
Mutual labels: pentesting, pentest, bugbounty
YAPS
Yet Another PHP Shell - The most complete PHP reverse shell
Stars: ✭ 35 (-88.71%)
Mutual labels: pentesting, bugbounty, pentest
Xspear
Powerfull XSS Scanning and Parameter analysis tool&gem
Stars: ✭ 583 (+88.06%)
Mutual labels: pentest, xss, bugbounty
Dictionary Of Pentesting
Dictionary collection project such as Pentesing, Fuzzing, Bruteforce and BugBounty. 渗透测试、SRC漏洞挖掘、爆破、Fuzzing等字典收集项目。
Stars: ✭ 492 (+58.71%)
Mutual labels: pentesting, pentest, bugbounty
Reconftw
reconFTW is a tool designed to perform automated recon on a target domain by running the best set of tools to perform scanning and finding out vulnerabilities
Stars: ✭ 974 (+214.19%)
Mutual labels: pentest, xss, bugbounty
Defaultcreds Cheat Sheet
One place for all the default credentials to assist the Blue/Red teamers activities on finding devices with default password 🛡️
Stars: ✭ 1,949 (+528.71%)
Mutual labels: pentesting, pentest, bugbounty
avain
A Modular Framework for the Automated Vulnerability Analysis in IP-based Networks
Stars: ✭ 56 (-81.94%)
Mutual labels: pentesting, pentest
xssmap
Intelligent XSS detection tool that uses human techniques for looking for reflected cross-site scripting (XSS) vulnerabilities
Stars: ✭ 107 (-65.48%)
Mutual labels: xss, pentesting
offensive-docker-vps
Create a VPS on Google Cloud Platform or Digital Ocean easily with Offensive Docker included to launch assessment to the targets.
Stars: ✭ 66 (-78.71%)
Mutual labels: pentesting, pentest
sub404
A python tool to check subdomain takeover vulnerability
Stars: ✭ 205 (-33.87%)
Mutual labels: pentesting, bugbounty
NewNtdllBypassInlineHook CSharp
Load a fresh new copy of ntdll.dll via file mapping to bypass API inline hook.
Stars: ✭ 35 (-88.71%)
Mutual labels: pentesting, pentest
Ccat
Cloud Container Attack Tool (CCAT) is a tool for testing security of container environments.
Stars: ✭ 300 (-3.23%)
Mutual labels: pentesting, pentest
quick-recon.py
Do some quick reconnaissance on a domain-based web-application
Stars: ✭ 13 (-95.81%)
Mutual labels: pentesting, bugbounty
vulnerabilities
List of every possible vulnerabilities in computer security.
Stars: ✭ 14 (-95.48%)
Mutual labels: xss, pentesting
awesome-list-of-secrets-in-environment-variables
🦄🔒 Awesome list of secrets in environment variables 🖥️
Stars: ✭ 538 (+73.55%)
Mutual labels: pentesting, bugbounty
SecurityExplained
SecurityExplained is a new series after the previous learning challenge series #Learn365. The aim of #SecurityExplained series is to create informational content in multiple formats and share with the community to enable knowledge creation and learning.
Stars: ✭ 301 (-2.9%)
Mutual labels: pentesting, bugbounty
JWTweak
Detects the algorithm of input JWT Token and provide options to generate the new JWT token based on the user selected algorithm.
Stars: ✭ 85 (-72.58%)
Mutual labels: pentesting, bugbounty
Dorknet
Selenium powered Python script to automate searching for vulnerable web apps.
Stars: ✭ 256 (-17.42%)
Mutual labels: pentesting, pentest
Lazyrecon
An automated approach to performing recon for bug bounty hunting and penetration testing.
Stars: ✭ 282 (-9.03%)
Mutual labels: pentest, bugbounty
FinDOM-XSS
FinDOM-XSS is a tool that allows you to finding for possible and/ potential DOM based XSS vulnerability in a fast manner.
Installation
$ git clone https://github.com/dwisiswant0/findom-xss.git --recurse-submodules
Dependencies: LinkFinder
Usage
To run the tool on a target, just use the following command.
$ ./findom-xss.sh https://domain.tld/about-us.html
This will run the tool against domain.tld.
URLs can also be piped to findom-xss and scan on them. For example:
$ cat urls.txt | ./findom-xss.sh
The second argument can be used to specify an output file.
$ ./findom-xss.sh https://domain.tld/about-us.html /path/to/output.txt
By default, output will be stored in the results/ directory in the repository with domain.tld.txt name.
License
FinDOM-XSS is licensed under the Apache. Take a look at the LICENSE for more information.
Thanks
- @dark_warlord14 - Inspired by the JSScanner tool, that's why this tool was made.
- @aslanewre - With possible patterns.
- All Contributors
Note that the project description data, including the texts, logos, images, and/or trademarks,
for each open source project belongs to its rightful owner.
If you wish to add or remove any projects, please contact us at [email protected].