Cross Site "Scripter" (aka XSSer) is an automatic -framework- to detect, exploit and report XSS vulnerabilities in web-based applications. https://xsser.03c8.net/

epsylon 12efcc8b78 advanced --reverse-check 2 weeks ago
.github 28334db377 XSSer v1.8.2 - 'The Hiv3' release 6 months ago
core 12efcc8b78 advanced --reverse-check 2 weeks ago
doc e8f3878c9c added socket SO_REUSEADDR + updated GeoIP 2 weeks ago
gtk 30fc0c8d50 XSSer v1.8[3] - 'The HiV€!' release 2 months ago
.gitattributes 28334db377 XSSer v1.8.2 - 'The Hiv3' release 6 months ago
.gitignore 28334db377 XSSer v1.8.2 - 'The Hiv3' release 6 months ago
.pylintrc 28334db377 XSSer v1.8.2 - 'The Hiv3' release 6 months ago
Makefile 30fc0c8d50 XSSer v1.8[3] - 'The HiV€!' release 2 months ago
README.md b4e24fbc99 Updated README.md 2 weeks ago
setup.py 30fc0c8d50 XSSer v1.8[3] - 'The HiV€!' release 2 months ago
xsser 30fc0c8d50 XSSer v1.8[3] - 'The HiV€!' release 2 months ago

README.md

XSSer



Cross Site "Scripter" (aka XSSer) is an automatic -framework- to detect, exploit and report XSS vulnerabilities in web-based applications.

It provides several options to try to bypass certain filters and various special techniques for code injection.

XSSer has pre-installed [ > 1300 XSS ] attacking vectors and can bypass-exploit code on several browsers/WAFs:

 [PHPIDS]: PHP-IDS
 [Imperva]: Imperva Incapsula WAF
 [WebKnight]: WebKnight WAF
 [F5]: F5 Big IP WAF
 [Barracuda]: Barracuda WAF
 [ModSec]: Mod-Security
 [QuickDF]: QuickDefense
 [Sucuri]: SucuriWAF 
 [Chrome]: Google Chrome
 [IE]: Internet Explorer
 [FF]: Mozilla's Gecko rendering engine, used by Firefox/Iceweasel
 [NS-IE]: Netscape in IE rendering engine mode
 [NS-G]: Netscape in the Gecko rendering engine mode
 [Opera]: Opera Browser

XSSer


Installing:

XSSer runs on many platforms. It requires Python (3.x) and the following libraries:

- python3-pycurl - Python bindings to libcurl (Python 3)
- python3-bs4 - error-tolerant HTML parser for Python 3
- python3-geoip - Python3 bindings for the GeoIP IP-to-country resolver library
- python3-gi - Python 3 bindings for gobject-introspection libraries
- python3-cairocffi - cffi-based cairo bindings for Python (Python3)
- python3-selenium - Python3 bindings for Selenium
- firefoxdriver - Firefox WebDriver support

On Debian-based systems (ex: Ubuntu), run:

sudo apt-get install python3-pycurl python3-bs4 python3-geoip python3-gi python3-cairocffi python3-selenium firefoxdriver

On other systems such as: Kali, Ubuntu, ArchLinux, ParrotSec, Fedora, etc... also run:

sudo pip3 install pycurl bs4 pygeoip gobject cairocffi selenium

Source libs:


License:

XSSer is released under the GPLv3. You can find the full license text in the LICENSE file.


Screenshots:

XSSer

XSSer

XSSer

XSSer

XSSer

XSSer

XSSer

XSSer