CheckXSS: Detect XSS vulnerability in Web Applications
CheckXSS
Detect XSS vulnerability in Web Applications
Feature
- Support url encoding bypass
- Support Unicode encoding of HTML tag attribute value to bypass
- Support HTML encoding to bypass the HTML tag attribute value
- Support for flexible replacement of () ‘” to bypass
- Case bypass
Install
curl -L -s https://raw.githubusercontent.com/Jewel591/CheckXSS/master/docs/install.sh|bash
Use
Support POST and GET request methods, support parameter injection detection in cookie, referer, useragent fields For example, test the returnUrl parameter in POST data:
python3.6 checkxss.py -u “https://example.com/login.do” –data=”returnUrl=utest” -p returnUrl
Copyright (c) 2020 Jewel591
Source: https://github.com/Jewel591/
