Automated Method to Find XSS Vulnerability

3 years ago 1369

BOOK THIS SPACE FOR AD

ARTICLE AD

Step:-1- install ParamSpider tool
>> https://github.com/devanshbatham/ParamSpider
Step:-2- install Gxss tool
>> https://github.com/KathanP19/Gxss
Step:-3- install Arjun tool
>> https://github.com/s0md3v/Arjun
Step:-4- install dalfox tool
>> https://github.com/hahwul/dalfox

Step:-5- run below commands and find xss
>> python3 ~/tools/ParamSpider/paramspider.py --domain testphp.vulnweb.com
>> cd output/
>> ls
>> cat testphp.vulnweb.com.txt | Gxss
>> cat testphp.vulnweb.com.txt | Gxss -p cyberasset
>> cat testphp.vulnweb.com.txt | Gxss -p cyberasset | dalfox pipe --mining-dict ~/tools/Arjun/arjun/db/params.txt --skip-bav

Read Entire Article