GitPlanet

Cheap and reliable Node.js hosting starts at $3/month, and $1/month static HTML hosting

Created with love in Canada, visit hostnodejs.com today

Feel like to post an Ad? Learn Details
All Projects → evilcos → Xssor2

evilcos / Xssor2

Licence: bsd-2-clause
XSS'OR - Hack with JavaScript.

Programming Languages

javascript
184084 projects - #8 most used programming language
HTML
75241 projects
python
139335 projects - #7 most used programming language

Labels

pentesthacking-toolpentest-toolencodingxsscsrfprobe

Projects that are alternatives of or similar to Xssor2

crawleet
Web Recon & Exploitation Tool.
Stars: ✭ 48 (-97.56%)
Mutual labels:  pentest, hacking-tool, pentest-tool
Cloakify
CloakifyFactory - Data Exfiltration & Infiltration In Plain Sight; Convert any filetype into list of everyday strings, using Text-Based Steganography; Evade DLP/MLS Devices, Defeat Data Whitelisting Controls, Social Engineering of Analysts, Evade AV Detection
Stars: ✭ 1,136 (-42.31%)
Mutual labels:  pentest, hacking-tool, pentest-tool
Thc Archive
All releases of the security research group (a.k.a. hackers) The Hacker's Choice
Stars: ✭ 474 (-75.93%)
Mutual labels:  pentest, hacking-tool, pentest-tool
awesome-pentest-tools
List of Security Archives Tools and software, generally for facilitate security & penetration research. Opening it up to everyone will facilitate a knowledge transfer. Hopefully the initial set will grow and expand.
Stars: ✭ 34 (-98.27%)
Mutual labels:  pentest, hacking-tool, pentest-tool
Sippts
Set of tools to audit SIP based VoIP Systems
Stars: ✭ 116 (-94.11%)
Mutual labels:  pentest, hacking-tool, pentest-tool
Hackerenv
Stars: ✭ 309 (-84.31%)
Mutual labels:  pentest, hacking-tool, pentest-tool
Dumpsterfire
"Security Incidents In A Box!" A modular, menu-driven, cross-platform tool for building customized, time-delayed, distributed security events. Easily create custom event chains for Blue- & Red Team drills and sensor / alert mapping. Red Teams can create decoy incidents, distractions, and lures to support and scale their operations. Build event sequences ("narratives") to simulate realistic scenarios and generate corresponding network and filesystem artifacts.
Stars: ✭ 775 (-60.64%)
Mutual labels:  pentest, hacking-tool, pentest-tool
Hacker101
Source code for Hacker101.com - a free online web and mobile security class.
Stars: ✭ 12,246 (+521.94%)
Mutual labels:  xss, csrf
Xshock
XSHOCK Shellshock Exploit
Stars: ✭ 65 (-96.7%)
Mutual labels:  hacking-tool, pentest-tool
Cloudflair
🔎 Find origin servers of websites behind CloudFlare by using Internet-wide scan data from Censys.
Stars: ✭ 1,176 (-40.27%)
Mutual labels:  pentest, pentest-tool
Web Brutator
Fast Modular Web Interfaces Bruteforcer
Stars: ✭ 97 (-95.07%)
Mutual labels:  pentest, hacking-tool
Dr0p1t Framework
A framework that create an advanced stealthy dropper that bypass most AVs and have a lot of tricks
Stars: ✭ 1,132 (-42.51%)
Mutual labels:  pentest, hacking-tool
Sudo killer
A tool to identify and exploit sudo rules' misconfigurations and vulnerabilities within sudo for linux privilege escalation.
Stars: ✭ 1,073 (-45.51%)
Mutual labels:  pentest, pentest-tool
Pythem
pentest framework
Stars: ✭ 1,060 (-46.17%)
Mutual labels:  pentest, xss
Pentesting Bible
Learn ethical hacking.Learn about reconnaissance,windows/linux hacking,attacking web technologies,and pen testing wireless networks.Resources for learning malware analysis and reverse engineering.
Stars: ✭ 8,981 (+356.12%)
Mutual labels:  hacking-tool, csrf
One Lin3r
Gives you one-liners that aids in penetration testing operations, privilege escalation and more
Stars: ✭ 1,259 (-36.06%)
Mutual labels:  hacking-tool, pentest-tool
Collection Document
Collection of quality safety articles. Awesome articles.
Stars: ✭ 1,387 (-29.56%)
Mutual labels:  pentest, xss
Cazador unr
Hacking tools
Stars: ✭ 95 (-95.18%)
Mutual labels:  xss, csrf
Ssrf Testing
SSRF (Server Side Request Forgery) testing resources
Stars: ✭ 1,718 (-12.75%)
Mutual labels:  pentest, pentest-tool
Hookish
Hooks in to interesting functions and helps reverse the web app faster.
Stars: ✭ 129 (-93.45%)
Mutual labels:  pentest, xss
View All Similar Projects ➔

XSS'OR

XSS'OR - Hack with JavaScript.

ONLINE

You can have a try:

https://xssor.io and http://xssor.io/

It contains three major modules: Encode/Decode, Codz, Probe.

INSTALL

Python 3 with Django 3.0.* or Python 2 with Django 1.11.*

xssor.cmd_url = location.protocol + '//xssor.io/cmd'; // replace xssor.io to your domain or ip address
  • pip3/pip install -r requirement.txt
  • python3/python manage.py runserver 0.0.0.0:8000

Browser http://[yourip]:8000 to enjoy.

If you want to deploy it with Nginx, you can use uWSGI.

If you want to delete probe automatically, you can use crontab to this script file(xssor/probeclear.py).

Try it by yourself.

DOCKER

You can build this project with docker

docker build -t xssor:latest .

Run the app with

docker run -d -p [port]:8000 xssor:latest [probe domain or ip]

CHANGELOG

UPDATE: 2020/07/28

*. Increase support for docker.

UPDATE: 2020/02/05

*. Compatible with Python 2 and Python 3.
*. Compatible with Django 1.11.* and Django 3.0.*.
*. Fix some bugs.

UPDATE: 2018/07/29

*. Compatible with HTTP and HTTPS.

UPDATE: 2017/09/23

*. Upgrade JS BEAURIFY.
*. Fix PACKER/UNPACKER error bug.

UPDATE: 2017/08/20

*. Increase support for mobile more friendly.

UPDATE: 2017/08/13

*. Fix Probe bug to file:// protocol.
*. Fix Probe bug in mobile app while without cookie.
*. Improve Probe Status.

UPDATE: 2017/05/07

*. Encode/Decode, enhanced.
*. Codz, enhanced.
*. Probe, free to try.
*. Complete rewriting with Python, Django, Bootstrap, jQuery, ...
*. Independent domain: xssor.io.

BE EVIL, DON'T BE BAD.

Note that the project description data, including the texts, logos, images, and/or trademarks, for each open source project belongs to its rightful owner. If you wish to add or remove any projects, please contact us at [email protected].