findom-xss: fast DOM based XSS vulnerability scanner

by do son · Published April 12, 2020 · Updated April 12, 2020

FinDOM-XSS

FinDOM-XSS is a tool that allows you to find possible and/ potential DOM-based XSS vulnerability in a fast manner.

$ git clone git@github.com:dwisiswant0/findom-xss.git

Change the value of the LINKFINDER variable (on line 3) with your main LinkFinder file.

To run the tool on a target, just use the following command.

$ ./findom-xss.sh https://target.host/about-us.html

This will run the tool against target.host. Or if you have a list of targets you want to scan.

$ cat urls.txt | xargs -I % ./findom-xss.sh %

The second argument can be used to specify an output file.

$ ./findom-xss.sh https://target.host/about-us.html /path/to/output.txt

By default, the output will be stored in the results/ directory in the repository with the target.host.txt name.