Skip to content

Latest commit

 

History

History
74 lines (55 loc) · 3.53 KB

README.md

File metadata and controls

74 lines (55 loc) · 3.53 KB
Raw

XSS Scanner Tool (Beta Version)

XSS Scanner Tool is a powerful tool built in Java using Selenium to help bug bounty hunters and penetration testers detect XSS vulnerabilities on target websites. The tool supports multi-threading, cookie management, custom payloads, and more. It is available as an executable JAR and requires Java to run.

Requirements

  • Java JDK 22 (Set the JAVA_HOME path in environment variables)
  • ChromeDriver (Download and set the path in C:\Drivers\chromedriver.exe)

Features

  • Multi-threading support for faster scanning
  • Custom XSS Payloads with a default payloads file
  • Cookie Injection for testing authenticated sessions
  • Negative Results Logging for tracking unsuccessful scans
  • Timeout Configuration for delaying the execution
  • View Mode to show or hide the browser during scanning

NOTE:

Setup Instructions

1. Java Installation

Ensure that you have Java JDK 22 or later installed. Set up the environment variables to run the tool.

  • Download Java JDK: Download Link
  • Set JAVA_HOME Environment Variable:
    1. Go to System Properties.
    2. Click on Environment Variables.
    3. Under System Variables, click on New.
    4. Add JAVA_HOME as the variable name and the path of your JDK folder as the value (e.g., C:\Program Files\Java\jdk-22).
    5. Edit the Path variable, and add C:\Program Files\Java\jdk-22\bin`.

2. ChromeDriver Setup

You must have ChromeDriver installed and placed in C:\Drivers\chromedriver.exe.

  • Download ChromeDriver: Download Link
  • Place the downloaded file in C:\Drivers\chromedriver.exe.

3. Running the XSS Scanner Tool

Once Java and ChromeDriver are set up, you can run the XSS scanner.

Command-Line Arguments

The tool can be run with various command-line arguments for flexible scanning.

FusionXss.exe --url <url> [options]
FusionXss.exe --file urls.txt --threads 4 --timeout 2 --payloads Min_Payloads.txt

FusionXss.exe --file urls.txt --threads 4 --timeout 2 --payloads Min_Payloads.txt

FusionXss.exe --url https://example.com --cookies sessionId:abc123:/ --payloads customPayloads.txt
Option Description
--url <url> Specify the target URL to scan.
--file <file> File containing a list of URLs to test.
--cookies <name:value:path> Add cookies for authenticated sessions (format: name:value:path).
--payloads <payload file> Use a custom payload file for scanning.
--negative <true/false> Log unsuccessful scans.
--timeout <seconds> Set request timeout in seconds.
--threads <number> Number of threads for concurrent scanning.
--view <on/off> Toggle browser visibility (default: off).

XSS Scanner