XSS-Freak is an XSS scanner fully written in python3 from scratch. It is one of its kind since it crawls the website for all possible links and directories to expand its attack scope. Then it searches them for input tags and then launches a bunch of XSS payloads. if an input is not sanitized and vulnerable to XSS attacks, the tool will discover it in seconds. Requirements: High Internet Connection Speed. A New PC that is capable of handling a high amount of threads concurrently. Luck Of course. How Does it Work: First You Supply A Target Website To Scan And A List Which Contains Different XSS Payloads (better low amount and more effective and Least Detected Payloads) Then It Crawls The Main Website (Index Page) For Possible Links and Directories then it Crawls the Found Directories (if exist any) for additional links they weren't found in the initial crawl and add them to its attack scope. Then the tool will crawl all the links that were found in both in the initial scan and links from the directory For HTML INPUTS. Then the tool adds all the found HTML INPUTS to its attack scope. then the tool launches an ATTACK on all HTML INPUTS with the XSS payloads the user-provided from the list. if the HTML INPUT IS NOT SANITIZED PROPERLY and Filtered The Script Will Instantly Detect It and Will Print Out The Vulnerable Parameter. Note: The Script Is Too Powerful For Old Computers. Advantages: Supports Multithreading For Efficiency and Faster…
govanguard https://govanguard.com/wp-content/uploads/2018/04/Header_Logo.png govanguard2020-02-11 06:30:002020-02-11 06:30:00XSS-Freak - An XSS Scanner Fully Written In Python3 From Scratch
Our Standard Office Hours
Monday – Friday: 8:00AM – 5:00PM EDT
Saturday – Sunday: Closed
Where to Find Us
Data Privacy Notice
- – All product names, logos, and brands are property of their respective owners.
- – The use of these names, logos, and brands is for identification purposes only and does not imply endorsement.
- – Content syndication and aggregation of public information is solely for the purpose of identifying information security trends, all syndicated content contains source links to the content creator website. All content is owned by it’s respective content creators.
- – If you are an owner of some content and want it to be removed, please email firstname.lastname@example.org