t3l3machus / toxssin Goto Github PK

An XSS exploitation command-line interface and payload generator.

License: MIT License

JavaScript 36.78% Python 63.22%

cross-site-scripting exploitation javascript penetration-testing pentesting-tools python web-penetration-testing xss-exploitation xss-vulnerability hacking

toxssin's Introduction

Connect with me / Support:

Hi, I'm t3l3machus, Penetration Tester & Cybersec Researcher from Athens, Greece 🇬🇷, currently living in Poland 🇵🇱.
If you like the tools I make please show some love by following me, buymeacoffee, throwing a star here and there or just give respect on HackTheBox.

Projects:

💥 Offensive Security Tools

Project	Short Description	Stars	Forks
Villain	A C2 backdoor generator and multi-session handler.
toxssin	An XSS exploitation command-line interface.
hoaxshell	A Windows reverse shell payload generator and handler that abuses the http(s) protocol to establish a beacon-like reverse shell.
psudohash	A password list generator based on keywords mutated by commonly used patterns and more.
PowerShell-Obfuscation-Bible	A collection of techniques, examples and a little bit of theory for manually obfuscating PowerShell scripts.
eviltree	A python3 remake of the classic "tree" command with the additional feature of searching for user provided keywords/regex in files, highlighting those that contain matches.
wwwtree	A utility for quickly and easily locating, web hosting and transferring resources during PrivEsc.
CVE-2023-22960	PoC for CVE-2023-22960 (Brute-force Lexmark printers).
Synergy Httpx	A Python http(s) server designed to assist in red teaming activities such as receiving intercepted data via POST requests and serving content dynamically (e.g. payloads).
BabelStrike	Performs Romanization and name-to-usernames convertion of full name lists.
pentest-pivoting	A network pivoting guide for pentests / CTFs.

⚡ Other Tools, Guides, etc

Project	Short Description	Stars	Forks
ssh-log-alert	Receive email alerts on successful ssh logins (mailgun).
gmail-ssh-log-alert	Receive email alerts on successful ssh logins (gmail).
cybersec-service-metrics	A spreadsheet designed to automatically generate Key Performance Indicators for Cyber Security Services based on documented data. Ideal for Team leaders / Managers of small-medium sized organizations.
Awesome-AI	A list of awesome AI resources around the internet.
OWASP-Testing-Guide-Checklist	OWASP based Web Application Security Testing Checklist.

Contributions

Project	Short Description	Contribution
nuclei-templates	Templates are the core of the nuclei scanner which powers the actual scanning engine.	Templates contributed: CVE-2024-2340, sap-public-admin
reverse-shell-generator (revshells.com)	Hosted Reverse Shell generator with a ton of functionality.	Added HoaxShell and front-end style improvements.

toxssin's People

Contributors

Stargazers

Watchers

Forkers

0xsojalsec polling-repo-continua rizkyramadhanch scriptkkiddie 419066074 y0d4a victoriakennen bug-tools hunt2behunter oakkaya zzhsec sec-fork jeromeyoung viniciusmucuge startagain2016 pecorawal yalonso7 jumping gizatupu gprime31 mracumen sashka3076 0next0 crackercat junsecurity refael613 acealchemycyberblaze lowsecurity777 ismailvc1111 shuvamoy pablite5 heartsleep vb0782 mellonaut 5l1v3r1 luoam yekutielyehuda psechopath oxl-legacy munjurhasan444 attacker-codeninja nidhir2k1 sinsixx bitbob-cmd jahno daqab matrixsociety nanox dutchcyberguy takianfif cloudddosonline tonyrex99 sirgloomyy leomatias p0intsec marcoshat slooppe abramas lay0us bowman03 tehseensagar digits88 seihaspi h4xl0r 1florentin websecresearch escheiner 8l4nk kingdotnet mgcfish jakuta-tech mkdirlove lexavey linux4sa rizenbridge sancur altanateser nocomp crispud rossja despratesparten cybercraftsmanx wizardwa ivan6207 totoro2205 vaginessa p4n7h3rx sajidqureshi786 matthieubmt eaagteam yen5004 vcatss tehmasta fdlucifer joseluisinigo trostisteam vacquer0 kdahal bemonolit neerozprasain

toxssin's Issues

Error execution

Hello,

when I run the script, I have this error:

  File "/opt/toxssin/toxssin.py", line 13, in <module>
    from validators import url as validate_url
ModuleNotFoundError: No module named 'validators'

I have installed the requirements.

A greeting and thanks

Improvement to the readme.

Actually, there is no need to buy a domain, you can register a tk/ml domain (which are free to register by Freenom if I remember correctly) (:

Toxsin is not picking up my browser, do i need to specify my browser or do i need to trigger it with the payload ?

Issue tin your scanner

hi How to fix this .You scanner do not works .

Traceback (most recent call last):
File "/home/ugiel/toxssin/toxssin.py", line 841, in
main()
File "/home/ugiel/toxssin/toxssin.py", line 701, in main
httpd.socket = ssl.wrap_socket (
File "/usr/lib/python3.10/ssl.py", line 1468, in wrap_socket
context.load_cert_chain(certfile, keyfile)
FileNotFoundError: [Errno 2] No such file or directory

error of execution

Hello,

when I run the script I have this error:

Traceback (most recent call last):
  File "/opt/XSS/toxssin/./toxssin.py", line 13, in <module>
    from validators import url as validate_url 
ModuleNotFoundError: No module named 'validators'

A Greeting and thanks

Possibly Issue with pandas/numpy

I am not sure if this is related to me updating to Ubuntu 22.04 LTS from 20.04LTS; but when I tried to run

python3 ./toxssin.py
Traceback (most recent call last):
  File "/Tools/toxssin/./toxssin.py", line 15, in <module>
    from pandas import read_html, DataFrame
  File "/Tools/toxssin/.venv/lib/python3.10/site-packages/pandas/__init__.py", line 22, in <module>
    from pandas.compat import (
  File "/Tools/toxssin/.venv/lib/python3.10/site-packages/pandas/compat/__init__.py", line 15, in <module>
    from pandas.compat.numpy import (
  File "/Tools/toxssin/.venv/lib/python3.10/site-packages/pandas/compat/numpy/__init__.py", line 7, in <module>
    from pandas.util.version import Version
  File "/Tools/toxssin/.venv/lib/python3.10/site-packages/pandas/util/__init__.py", line 1, in <module>
    from pandas.util._decorators import (  # noqa
  File "/Tools/toxssin/.venv/lib/python3.10/site-packages/pandas/util/_decorators.py", line 14, in <module>
    from pandas._libs.properties import cache_readonly  # noqa
  File "/Tools/toxssin/.venv/lib/python3.10/site-packages/pandas/_libs/__init__.py", line 13, in <module>
    from pandas._libs.interval import Interval
  File "pandas/_libs/interval.pyx", line 1, in init pandas._libs.interval
ValueError: numpy.dtype size changed, may indicate binary incompatibility. Expected 96 from C header, got 88 from PyObject
(.venv)➜toxssin(main)✗pip3 uninstall pandas
Found existing installation: pandas 1.3.5
Uninstalling pandas-1.3.5:
  Would remove:
    /Tools/toxssin/.venv/lib/python3.10/site-packages/pandas-1.3.5.dist-info/*
    /Tools/toxssin/.venv/lib/python3.10/site-packages/pandas/*
Proceed (Y/n)? y
  Successfully uninstalled pandas-1.3.5
(.venv)➜toxssin(main)✗pip3 install pandas
Collecting pandas
  Using cached pandas-2.2.2-cp310-cp310-manylinux_2_17_x86_64.manylinux2014_x86_64.whl (13.0 MB)
Requirement already satisfied: python-dateutil>=2.8.2 in ./.venv/lib/python3.10/site-packages (from pandas) (2.9.0.post0)
Requirement already satisfied: numpy>=1.22.4 in ./.venv/lib/python3.10/site-packages (from pandas) (2.0.0)
Requirement already satisfied: pytz>=2020.1 in ./.venv/lib/python3.10/site-packages (from pandas) (2024.1)
Requirement already satisfied: tzdata>=2022.7 in ./.venv/lib/python3.10/site-packages (from pandas) (2024.1)
Requirement already satisfied: six>=1.5 in ./.venv/lib/python3.10/site-packages (from python-dateutil>=2.8.2->pandas) (1.16.0)
Installing collected packages: pandas
Successfully installed pandas-2.2.2
(.venv)➜toxssin(main)✗python3 ./toxssin.py
usage: toxssin.py [-h] -u URL -c CERTFILE -k KEYFILE [-p PORT] [-s SCRIPT_NAME] [-e ELEMENTS] [-f FREQUENCY] [-a COOKIE_AGE] [-t] [-g] [-v] [-q]
toxssin.py: error: the following arguments are required: -u/--url, -c/--certfile, -k/--keyfile

After some googling, it looked like there were isses with numpy and pandas. removing pandas 1.3.5 (listed in requirements.txt) and installing the newest seems to ahve fixed it

t3l3machus / toxssin Goto Github PK

toxssin's Introduction

Connect with me / Support:

Projects:

toxssin's People

Contributors

Stargazers

Watchers

Forkers

toxssin's Issues

Error execution

Improvement to the readme.

Toxsin is not picking up my browser, do i need to specify my browser or do i need to trigger it with the payload ?

Issue tin your scanner

error of execution

Possibly Issue with pandas/numpy

Recommend Projects

React

Vue.js

Typescript

TensorFlow

Django

Laravel

D3

Recommend Topics

javascript

web

server

Machine learning

Visualization

Game

Recommend Org

Facebook

Microsoft

Google

Alibaba

D3

Tencent