Git Product home page Git Product logo

xsstron's Issues

Not working on Ubuntu

0 info it worked if it ends with ok
1 verbose cli [ '/usr/bin/node', '/usr/bin/npm', 'start' ]
2 info using [email protected]
3 info using [email protected]
4 verbose run-script [ 'prestart', 'start', 'poststart' ]
5 info lifecycle [email protected]prestart: [email protected]
6 info lifecycle [email protected]start: [email protected]
7 verbose lifecycle [email protected]start: unsafe-perm in lifecycle true
8 verbose lifecycle [email protected]start: PATH: /usr/share/npm/node_modules/npm-lifecycle/node-gyp-bin:/home/soufiane/Tools/XSS/XSSTRON/node_modules/.bin:/home/soufiane/.local/bin:/home/soufiane/.rvm/gems/ruby-3.0.0/bin:/home/soufiane/.rvm/gems/ruby-3.0.0@global/bin:/usr/share/rvm/rubies/ruby-3.0.0/bin:/home/soufiane/.local/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/usr/games:/usr/local/games:/snap/bin:/usr/share/rvm/bin
9 verbose lifecycle [email protected]start: CWD: /home/soufiane/Tools/XSS/XSSTRON
10 silly lifecycle [email protected]start: Args: [ '-c', 'electron .' ]
11 silly lifecycle [email protected]start: Returned: code: 1 signal: null
12 info lifecycle [email protected]start: Failed to exec start script
13 verbose stack Error: [email protected] start: electron .
13 verbose stack Exit status 1
13 verbose stack at EventEmitter. (/usr/share/npm/node_modules/npm-lifecycle/index.js:332:16)
13 verbose stack at EventEmitter.emit (events.js:198:13)
13 verbose stack at ChildProcess. (/usr/share/npm/node_modules/npm-lifecycle/lib/spawn.js:55:14)
13 verbose stack at ChildProcess.emit (events.js:198:13)
13 verbose stack at maybeClose (internal/child_process.js:982:16)
13 verbose stack at Process.ChildProcess._handle.onexit (internal/child_process.js:259:5)
14 verbose pkgid [email protected]
15 verbose cwd /home/soufiane/Tools/XSS/XSSTRON
16 verbose Linux 5.4.0-60-generic
17 verbose argv "/usr/bin/node" "/usr/bin/npm" "start"
18 verbose node v10.19.0
19 verbose npm v6.14.4
20 error code ELIFECYCLE
21 error errno 1
22 error [email protected] start: electron .
22 error Exit status 1
23 error Failed at the [email protected] start script.
23 error This is probably not a problem with npm. There is likely additional logging output above.
24 verbose exit [ 1, true ]

Error while using Mass Scan

npm ERR! code 3221225477
npm ERR! path C:\Users\pra27\Desktop\XSSTRON-main
npm ERR! command failed
npm ERR! command C:\Windows\system32\cmd.exe /d /s /c electron .

npm ERR! A complete log of this run can be found in:
npm ERR! C:\Users\pra27\AppData\Local\npm-cache_logs\2021-02-15T17_53_05_021Z-debug.log

Check post xss on secondary page

In example i have POST request
site.com/edit-account.php?username=1

And after that submit i need to check on another page site.com/myaccount.php is the xss is executed. , like --second-order in sqlmap

Getting below error while running the app , any idea ?

/XSSTRON/node_modules/electron/dist/electron exited with signal SIGTRAP
npm ERR! code ELIFECYCLE
npm ERR! errno 1
npm ERR! [email protected] start: electron .
npm ERR! Exit status 1
npm ERR!
npm ERR! Failed at the [email protected] start script.
npm ERR! This is probably not a problem with npm. There is likely additional logging output above.

npm ERR! A complete log of this run can be found in:

External URL in XSS test cases

In order to test for XSS vulnerabilities via an Electron application running locally, this project should not use external, out of end-user control XSS payloads hosted on third-party services such as the one present in xss.html.

XSSTRON/xss.html

Line 26 in 02ab3e7

var ujs1 = `///xsstron.herokuapp.com/x.php`

XSSTRON/xssp.html

Line 27 in 02ab3e7

var ujs1 = `///qrsha.000webhostapp.com/xsstron.php`

Getting this error on Kali

xsstron error

Here is the log file

0 verbose cli [ '/usr/bin/node', '/usr/bin/npm', 'install' ]
1 info using [email protected]
2 info using [email protected]
3 timing config:load:defaults Completed in 2ms
4 timing config:load:file:/usr/share/nodejs/npm/npmrc Completed in 1ms
5 timing config:load:builtin Completed in 1ms
6 timing config:load:cli Completed in 1ms
7 timing config:load:env Completed in 1ms
8 timing config:load:file:/home/kali/XSSTRON/.npmrc Completed in 0ms
9 timing config:load:project Completed in 0ms
10 timing config:load:file:/root/.npmrc Completed in 0ms
11 timing config:load:user Completed in 0ms
12 timing config:load:file:/etc/npmrc Completed in 1ms
13 timing config:load:global Completed in 1ms
14 timing config:load:cafile Completed in 0ms
15 timing config:load:validate Completed in 0ms
16 timing config:load:setUserAgent Completed in 0ms
17 timing config:load:setEnvs Completed in 1ms
18 timing config:load Completed in 7ms
19 verbose npm-session 87a8f9968da7795b
20 timing npm:load Completed in 14ms
21 timing arborist:ctor Completed in 1ms
22 timing idealTree:init Completed in 91ms
23 timing idealTree:userRequests Completed in 0ms
24 silly idealTree buildDeps
25 silly fetch manifest electron@^10.0
26 http fetch GET 304 https://registry.npmjs.org/electron 1281ms (from cache)
27 silly placeDep ROOT [email protected] REPLACE for: [email protected] want: ^10.0
28 timing idealTree:#root Completed in 1295ms
29 timing idealTree:node_modules/electron Completed in 0ms
30 timing idealTree:buildDeps Completed in 1296ms
31 timing idealTree:fixDepFlags Completed in 2ms
32 timing idealTree Completed in 1391ms
33 timing reify:loadTrees Completed in 1391ms
34 timing reify:diffTrees Completed in 1ms
35 silly reify moves {}
36 timing reify:retireShallow Completed in 0ms
37 timing reify:createSparse Completed in 169ms
38 timing reify:loadBundles Completed in 0ms
39 timing reifyNode:node_modules/wrappy Completed in 297ms
40 timing reifyNode:node_modules/universalify Completed in 298ms
41 timing reifyNode:node_modules/url-parse-lax Completed in 298ms
42 timing reifyNode:node_modules/to-readable-stream Completed in 297ms
43 timing reifyNode:node_modules/process-nextick-args Completed in 298ms
44 timing reifyNode:node_modules/prepend-http Completed in 298ms
45 timing reifyNode:node_modules/once Completed in 298ms
46 timing reifyNode:node_modules/sumchecker/node_modules/ms Completed in 298ms
47 timing reifyNode:node_modules/npm-conf/node_modules/pify Completed in 298ms
48 timing reifyNode:node_modules/ms Completed in 298ms
49 timing reifyNode:node_modules/mimic-response Completed in 298ms
50 timing reifyNode:node_modules/lowercase-keys Completed in 298ms
51 timing reifyNode:node_modules/ini Completed in 298ms
52 timing reifyNode:node_modules/end-of-stream Completed in 298ms
53 timing reifyNode:node_modules/duplexer3 Completed in 298ms
54 timing reifyNode:node_modules/decompress-response Completed in 298ms
55 timing reifyNode:node_modules/buffer-from Completed in 298ms
56 timing reifyNode:node_modules/buffer-crc32 Completed in 298ms
57 timing reifyNode:node_modules/@electron/get/node_modules/ms Completed in 299ms
58 timing reifyNode:node_modules/lru-cache Completed in 302ms
59 timing reifyNode:node_modules/config-chain Completed in 302ms
60 timing reifyNode:node_modules/serialize-error Completed in 305ms
61 timing reifyNode:node_modules/pend Completed in 305ms
62 timing reifyNode:node_modules/p-cancelable Completed in 305ms
63 timing reifyNode:node_modules/normalize-url Completed in 305ms
64 timing reifyNode:node_modules/matcher Completed in 305ms
65 timing reifyNode:node_modules/inherits Completed in 305ms
66 timing reifyNode:node_modules/get-stream Completed in 304ms
67 timing reifyNode:node_modules/env-paths Completed in 305ms
68 timing reifyNode:node_modules/escape-string-regexp Completed in 305ms
69 timing reifyNode:node_modules/encodeurl Completed in 305ms
70 timing reifyNode:node_modules/detect-node Completed in 305ms
71 timing reifyNode:node_modules/cacheable-request/node_modules/lowercase-keys Completed in 305ms
72 timing reifyNode:node_modules/yallist Completed in 309ms
73 timing reifyNode:node_modules/responselike Completed in 309ms
74 timing reifyNode:node_modules/jsonfile Completed in 309ms
75 timing reifyNode:node_modules/http-cache-semantics Completed in 309ms
76 timing reifyNode:node_modules/clone-response Completed in 308ms
77 timing reifyNode:node_modules/@szmarczak/http-timer Completed in 308ms
78 timing reifyNode:node_modules/yauzl Completed in 312ms
79 timing reifyNode:node_modules/util-deprecate Completed in 312ms
80 timing reifyNode:node_modules/keyv Completed in 311ms
81 timing reifyNode:node_modules/concat-stream/node_modules/safe-buffer Completed in 310ms
82 timing reifyNode:node_modules/proto-list Completed in 314ms
83 timing reifyNode:node_modules/defer-to-connect Completed in 313ms
84 timing reifyNode:node_modules/cacheable-request/node_modules/get-stream Completed in 312ms
85 timing reifyNode:node_modules/pump Completed in 316ms
86 timing reifyNode:node_modules/graceful-fs Completed in 315ms
87 timing reifyNode:node_modules/extract-zip Completed in 315ms
88 timing reifyNode:node_modules/concat-stream/node_modules/string_decoder Completed in 314ms
89 timing reifyNode:node_modules/concat-stream Completed in 314ms
90 timing reifyNode:node_modules/mkdirp Completed in 318ms
91 timing reifyNode:node_modules/concat-stream/node_modules/isarray Completed in 318ms
92 timing reifyNode:node_modules/json-buffer Completed in 321ms
93 timing reifyNode:node_modules/core-util-is Completed in 321ms
94 timing reifyNode:node_modules/utf8-byte-length Completed in 325ms
95 timing reifyNode:node_modules/progress Completed in 324ms
96 timing reifyNode:node_modules/sumchecker/node_modules/debug Completed in 324ms
97 timing reifyNode:node_modules/cacheable-request Completed in 322ms
98 timing reifyNode:node_modules/@electron/get/node_modules/debug Completed in 323ms
99 timing reifyNode:node_modules/@sindresorhus/is Completed in 324ms
100 timing reifyNode:node_modules/semver-compare Completed in 329ms
101 timing reifyNode:node_modules/fd-slicer Completed in 328ms
102 timing reifyNode:node_modules/truncate-utf8-bytes Completed in 330ms
103 timing reifyNode:node_modules/json-stringify-safe Completed in 329ms
104 timing reifyNode:node_modules/es6-error Completed in 329ms
105 timing reifyNode:node_modules/sanitize-filename Completed in 331ms
106 timing reifyNode:node_modules/typedarray Completed in 335ms
107 timing reifyNode:node_modules/npm-conf Completed in 333ms
108 timing reifyNode:node_modules/global-tunnel-ng Completed in 333ms
109 timing reifyNode:node_modules/define-properties/node_modules/object-keys Completed in 334ms
110 timing reifyNode:node_modules/boolean Completed in 334ms
111 timing reifyNode:node_modules/define-properties Completed in 336ms
112 timing reifyNode:node_modules/sprintf-js Completed in 339ms
113 timing reifyNode:node_modules/tunnel Completed in 340ms
114 timing reifyNode:node_modules/debug Completed in 343ms
115 timing reifyNode:node_modules/sumchecker Completed in 349ms
116 timing reifyNode:node_modules/minimist Completed in 349ms
117 timing reifyNode:node_modules/got Completed in 350ms
118 timing reifyNode:node_modules/globalthis Completed in 351ms
119 timing reifyNode:node_modules/electron Completed in 353ms
120 timing reifyNode:node_modules/roarr Completed in 358ms
121 timing reifyNode:node_modules/type-fest Completed in 359ms
122 timing reifyNode:node_modules/concat-stream/node_modules/readable-stream Completed in 358ms
123 timing reifyNode:node_modules/global-agent/node_modules/semver Completed in 378ms
124 timing reifyNode:node_modules/fs-extra Completed in 381ms
125 timing reifyNode:node_modules/@electron/get Completed in 382ms
126 timing reifyNode:node_modules/@types/node Completed in 387ms
127 timing reifyNode:node_modules/global-agent Completed in 395ms
128 timing reifyNode:node_modules/lodash Completed in 618ms
129 timing reifyNode:node_modules/core-js Completed in 701ms
130 timing reify:unpack Completed in 704ms
131 timing reify:unretire Completed in 0ms
132 timing build:queue Completed in 7ms
133 timing build:link:node_modules/electron Completed in 2ms
134 timing build:link:node_modules/extract-zip Completed in 2ms
135 timing build:link:node_modules/global-agent/node_modules/semver Completed in 2ms
136 timing build:link:node_modules/mkdirp Completed in 2ms
137 timing build:link Completed in 3ms
138 info run [email protected] postinstall node_modules/core-js node -e "try{require('./postinstall')}catch(e){}"
139 info run [email protected] postinstall node_modules/electron node install.js
140 info run [email protected] postinstall { code: 0, signal: null }
141 timing build:run:postinstall:node_modules/core-js Completed in 79ms
142 http fetch POST 200 https://registry.npmjs.org/-/npm/v1/security/advisories/bulk 1251ms
143 timing auditReport:getReport Completed in 1253ms
144 timing metavuln:cache:get:security-advisory:lodash:QECQhqENwQoNVl6da4JbJcLbJD29giB5sLJN+gaFqW+TzG4UNvuVAr/wBc9mvIFVshry+iHa5VIaBdTVItbLtg== Completed in 16ms
145 http fetch GET 304 https://registry.npmjs.org/lodash 247ms (from cache)
146 timing metavuln:packument:lodash Completed in 250ms
147 timing metavuln:load:security-advisory:lodash:1673 Completed in 3ms
148 timing metavuln:calculate:security-advisory:lodash:1673 Completed in 257ms
149 timing metavuln:cache:get:security-advisory:global-tunnel-ng:D5CWMYQ/e62QpYXbX+2XNNLwIlZsYz6VBwLOpR49Ymfbu0dv4pBQ5G/lukeeypPU0l5wwzFB4uRs4fQHLAt/Vw== Completed in 5ms
150 http fetch GET 304 https://registry.npmjs.org/global-tunnel-ng 273ms (from cache)
151 timing metavuln:packument:global-tunnel-ng Completed in 276ms
152 timing metavuln:load:security-advisory:global-tunnel-ng:QECQhqENwQoNVl6da4JbJcLbJD29giB5sLJN+gaFqW+TzG4UNvuVAr/wBc9mvIFVshry+iHa5VIaBdTVItbLtg== Completed in 0ms
153 timing metavuln:calculate:security-advisory:global-tunnel-ng:QECQhqENwQoNVl6da4JbJcLbJD29giB5sLJN+gaFqW+TzG4UNvuVAr/wBc9mvIFVshry+iHa5VIaBdTVItbLtg== Completed in 277ms
154 timing auditReport:init Completed in 542ms
155 timing reify:audit Completed in 1797ms
156 info run [email protected] postinstall { code: 1, signal: null }
157 timing reify:rollback:createSparse Completed in 183ms
158 timing reify:rollback:retireShallow Completed in 0ms
159 timing command:install Completed in 336234ms
160 verbose stack Error: command failed
160 verbose stack     at ChildProcess.<anonymous> (/usr/share/nodejs/@npmcli/promise-spawn/index.js:64:27)
160 verbose stack     at ChildProcess.emit (events.js:314:20)
160 verbose stack     at maybeClose (internal/child_process.js:1022:16)
160 verbose stack     at Process.ChildProcess._handle.onexit (internal/child_process.js:287:5)
161 verbose pkgid [email protected]
162 verbose cwd /home/kali/XSSTRON
163 verbose Linux 5.10.0-kali7-amd64
164 verbose argv "/usr/bin/node" "/usr/bin/npm" "install"
165 verbose node v12.21.0
166 verbose npm  v7.5.2
167 error code 1
168 error path /home/kali/XSSTRON/node_modules/electron
169 error command failed
170 error command sh -c node install.js
171 error Error: EACCES: permission denied, stat '/root/.cache/electron/httpsgithub.comelectronelectronreleasesdownloadv10.4.7SHASUMS256.txt/SHASUMS256.txt'
172 verbose exit 1

Kali problem

npm start

[email protected] start
electron .

[96289:0411/192138.530834:FATAL:setuid_sandbox_host.cc(158)] The SUID sandbox helper binary was found, but is not configured correctly. Rather than run without sandboxing I'm aborting now. You need to make sure that /home/kevin/Scripts/XSS/XSSTRON/node_modules/electron/dist/chrome-sandbox is owned by root and has mode 4755.
/home/kevin/Scripts/XSS/XSSTRON/node_modules/electron/dist/electron exited with signal SIGTRAP
npm ERR! code 1
npm ERR! path /home/kevin/Scripts/XSS/XSSTRON
npm ERR! command failed
npm ERR! command sh -c electron .

npm ERR! A complete log of this run can be found in:
npm ERR! /home/kevin/.npm/_logs/2021-04-11T23_21_38_544Z-debug.log

Another vay:
I made all instructions here:
sudo apt install npm
sudo npm install -g electron --unsafe-perm=true --allow-root
cd XSSTRON
sudo npm install
electron . --no-sandbox

BUT all I have is:
https://imgur.com/jCD6RV2.png - it doesn't work. It can't go any site.

Please Help

Error install on Mac

I got error while installing xsstron on mac 10.14

thecrott$ sudo npm install

> [email protected] postinstall /Users/aldothecrott/hackingtools/XSSTRON/node_modules/core-js
> node -e "try{require('./postinstall')}catch(e){}"

Thank you for using core-js ( https://github.com/zloirock/core-js ) for polyfilling JavaScript standard library!

The project needs your help! Please consider supporting of core-js on Open Collective or Patreon:
> https://opencollective.com/core-js
> https://www.patreon.com/zloirock

Also, the author of core-js ( https://github.com/zloirock ) is looking for a good job -)

> [email protected] postinstall /Users/aldothecrott/hackingtools/XSSTRON/node_modules/electron
> node install.js

Error: EACCES: permission denied, mkdir '/Users/aldothecrott/hackingtools/XSSTRON/node_modules/electron/dist'
npm WARN [email protected] No repository field.
npm WARN [email protected] license should be a valid SPDX license expression

npm ERR! code ELIFECYCLE
npm ERR! errno 1
npm ERR! [email protected] postinstall: `node install.js`
npm ERR! Exit status 1
npm ERR!
npm ERR! Failed at the [email protected] postinstall script.
npm ERR! This is probably not a problem with npm. There is likely additional logging output above.

npm ERR! A complete log of this run can be found in:
npm ERR!     /Users/aldothecrott/.npm/_logs/2021-02-15T07_34_00_184Z-debug.log

This is node and npm version I use

XSSTRON thecrott$ npm -v
6.10.0
XSSTRON thecrott$ node -v
v10.15.3

add

is it possible to add our own list of XSS also blind XSS payload

electron broswer not working

Hi,
I am using linux i have some problems using your tool.
electron . --no-sandbox after hit this command open a browser but any function not working.

Error while running the nmp install & nmp start

Hello, I'm facing this error while iinstalling the tool,

sudo npm install
[sudo] password for kali:

[email protected] postinstall /home/kali/XSSTRON/node_modules/core-js
node -e "try{require('./postinstall')}catch(e){}"

Thank you for using core-js ( https://github.com/zloirock/core-js ) for polyfilling JavaScript standard library!

The project needs your help! Please consider supporting of core-js on Open Collective or Patreon:

https://opencollective.com/core-js
https://www.patreon.com/zloirock

Also, the author of core-js ( https://github.com/zloirock ) is looking for a good job -)

[email protected] postinstall /home/kali/XSSTRON/node_modules/electron
node install.js
Downloading electron-v11.2.0-linux-x64.zip: [====================================================================================================] 100% ETA: 0.0 seconds
Error: EACCES: permission denied, stat '/root/.cache/electron/httpsgithub.comelectronelectronreleasesdownloadv11.2.0SHASUMS256.txt/SHASUMS256.txt'
npm WARN [email protected] No repository field.
npm WARN [email protected] license should be a valid SPDX license expression

npm ERR! code ELIFECYCLE
npm ERR! errno 1
npm ERR! [email protected] postinstall: node install.js
npm ERR! Exit status 1
npm ERR!
npm ERR! Failed at the [email protected] postinstall script.
npm ERR! This is probably not a problem with npm. There is likely additional logging output above.

npm ERR! A complete log of this run can be found in:
npm ERR! /root/.npm/_logs/2021-02-02T06_58_07_492Z-debug.log
kali@kali:/XSSTRON$
kali@kali:/XSSTRON$ sudo npm start

[email protected] start /home/kali/XSSTRON
electron .

sh: 1: electron: not found
npm ERR! code ELIFECYCLE
npm ERR! syscall spawn
npm ERR! file sh
npm ERR! errno ENOENT
npm ERR! [email protected] start: electron .
npm ERR! spawn ENOENT
npm ERR!
npm ERR! Failed at the [email protected] start script.
npm ERR! This is probably not a problem with npm. There is likely additional logging output above.

npm ERR! A complete log of this run can be found in:
npm ERR! /root/.npm/_logs/2021-02-02T06_58_21_984Z-debug.log

Unable to start project both in linux and windows

C:\Users......\Documents\My_list\XSSTRON>npm install
npm WARN saveError ENOENT: no such file or directory, open 'C:\Users.........\Documents\My_list\XSSTRON\package.json'
npm WARN enoent ENOENT: no such file or directory, open 'C:\Users...........\Documents\My_list\XSSTRON\package.json'
npm WARN XSSTRON No description
npm WARN XSSTRON No repository field.
npm WARN XSSTRON No README data
npm WARN XSSTRON No license field.

up to date in 0.396s
found 0 vulnerabilities

C:\Users........\Documents\My_list\XSSTRON>npm start
npm ERR! code ENOENT
npm ERR! syscall open
npm ERR! path C:\Users.....\Documents\My_list\XSSTRON\package.json
npm ERR! errno -4058
npm ERR! enoent ENOENT: no such file or directory, open 'C:\Users.......\Documents\My_list\XSSTRON\package.json'
npm ERR! enoent This is related to npm not being able to find a file.
npm ERR! enoent

npm ERR! A complete log of this run can be found in:
npm ERR! C:\Users.........\AppData\Roaming\npm-cache_logs\2021-02-03T06_41_20_529Z-debug.log

[email protected] start
electron .

[1865:0203/014611.704918:FATAL:electron_main_delegate.cc(254)] Running as root without --no-sandbox is not supported. See https://crbug.com/638180.
/root/XSSTRON/node_modules/electron/dist/electron exited with signal SIGTRAP
npm ERR! code 1
npm ERR! path /root/XSSTRON
npm ERR! command failed
npm ERR! command sh -c electron .

npm ERR! A complete log of this run can be found in:
npm ERR! /root/.npm/_logs/2021-02-03T06_46_11_722Z-debug.log

Issue Running On Kali

I followed all directions on Known issues for Kali and still when I bring up the browser cant type address in bar, just sits idle, nothing works.

Suspicious dependency in package.json

what's the purpose of the following dependency listed in your package.json ?
this library isn't being used by your project and it doesn't have a reference to any GitHub repository.

XSSTRON/package.json

Line 22 in 02ab3e7

"module_name": "^1.0.0"

the current source code of the dependency is the following:

var http = require('http');

http.createServer(function (request, response) {

	// 发送 HTTP 头部 
	// HTTP 状态值: 200 : OK
	// 内容类型: text/plain
	response.writeHead(200, {'Content-Type': 'text/plain'});

	// 发送响应数据 "Hello World"
	response.end('Hello World\n');
}).listen(8888);

// 终端打印如下信息
console.log('Server running at http://127.0.0.1:8888/');

and its package.json

{
  "name": "module_name",
  "version": "1.0.0",
  "description": "dis中文",
  "main": "index.js",
  "dependencies": {
    "express": "^4.13.4"
  },
  "devDependencies": {},
  "scripts": {
    "test": "make test",
    "start": "node server.js"
  },
  "author": "stay",
  "license": "ISC"
}

Arbitrary code execution

Steps to reproduce:

  • Click Mass URL Scan
  • Paste payload http://<img onerror="require('child_process').spawn('calc.exe')" src>
  • Click Submit
  • Boom! Calculator!

Payload is for Windows.

Unable to start project

Hi!

I cannot test your project, command npm start failed.

Env Summary

OS: Darwin Kernel Version 20.3.0: Thu Jan 21 00:07:06 PST 2021; root:xnu-7195.81.3~1/RELEASE_X86_64
Node: 14.15.2
Npm: 6.14.9

Error

❯ npm start

> [email protected] start ~/RenwaX23/XSSTRON
> electron .

~/RenwaX23/XSSTRON/node_modules/electron/dist/Electron.app/Contents/MacOS/Electron exited with signal SIGSEGV

Tool breaks

Hey

First of all it is a very good tool for finding xss
the tool breaks when given more than 500 urls to test

Recommend Projects

  • React photo React

    A declarative, efficient, and flexible JavaScript library for building user interfaces.

  • Vue.js photo Vue.js

    🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.

  • Typescript photo Typescript

    TypeScript is a superset of JavaScript that compiles to clean JavaScript output.

  • TensorFlow photo TensorFlow

    An Open Source Machine Learning Framework for Everyone

  • Django photo Django

    The Web framework for perfectionists with deadlines.

  • D3 photo D3

    Bring data to life with SVG, Canvas and HTML. 📊📈🎉

Recommend Topics

  • javascript

    JavaScript (JS) is a lightweight interpreted programming language with first-class functions.

  • web

    Some thing interesting about web. New door for the world.

  • server

    A server is a program made to process requests and deliver data to clients.

  • Machine learning

    Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.

  • Game

    Some thing interesting about game, make everyone happy.

Recommend Org

  • Facebook photo Facebook

    We are working to build community through open source technology. NB: members must have two-factor auth.

  • Microsoft photo Microsoft

    Open source projects and samples from Microsoft.

  • Google photo Google

    Google ❤️ Open Source for everyone.

  • D3 photo D3

    Data-Driven Documents codes.