+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Website Hacking (https://hackforums.net/forumdisplay.php?fid=43)
+---- Thread: A great Xss Scanner(has found 500+ xss) (/showthread.php?tid=6032271)
A great Xss Scanner(has found 500+ xss) - longwenzhang - Dec 12, 2019
github.com/lwzSoviet/NoXss.git
I do some research in xss recently, and I have found a xss about python2.x&python3.x. It's //cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-16935, and //bugs.python.org/issue38243. I also recieve $500 from hackerone about this issue at //hackerone.com/reports/705420.
So I decide to make a xss scanner named "NoXss" that can find xss automatically and I have finish it in one month. This tool is very fast and powerful. Why?? I have found 100+ xss by using it to scan internet traffic in one week, here are some screenshots:
github.com/lwzSoviet/download/blob/master/images/xss1.png
github.com/lwzSoviet/download/blob/master/images/xss2.png
github.com/lwzSoviet/download/blob/master/images/xss3.png
github.com/lwzSoviet/download/blob/master/images/xss4.png
It's github.com/lwzSoviet/NoXss.git, just clone and enjoy it!!! Smile Smile
Forgive me that I can't include link like 'htt ps ://' in the post for low level...