diff --git a/XSS Injection/README.md b/XSS Injection/README.md index 21af4b7..5f3b745 100644 --- a/XSS Injection/README.md +++ b/XSS Injection/README.md @@ -63,6 +63,8 @@ Cross-site scripting (XSS) is a type of computer security vulnerability typicall - [CSP Bypass](#csp-bypass) - [Common WAF Bypass](#common-waf-bypass) + + ## Exploit code or POC ### Data grabber for XSS @@ -123,6 +125,13 @@ More exploits at [http://www.xss-payloads.com/payloads-list.html?a#category=all] ``` +### Tools +* [XSSStrike](https://github.com/s0md3v/XSStrike): Very popular but unfortunately not very well maintained +* [xsser](https://github.com/epsylon/xsser): Utilizes a headless browser to detect XSS vulnerabilities +* [Dalfox](https://github.com/hahwul/dalfox): Extensive functionality and extremely fast thanks to the implementation in Go +* [XSpear](https://github.com/hahwul/XSpear): Similar to Dalfox but based on Ruby +* [domdig](git@github.com:fcavallarin/domdig.git): Headless Chrome XSS Tester + ## XSS in HTML/Applications ### Common Payloads