Overview
Atlassian SourceTree is a free Git and Mercurial client for Windows.
Atlassian SourceTree is a free Git and Mercurial client for Mac.
XSSSNIPER
xsssniper is an handy xss discovery tool with mass scanning functionalities.
USAGE:
Usage: xsssniper.py [options] Options: -h, --help show this help message and exit -u URL, --url=URL target URL --post try a post request to target url --data=POST_DATA posta data to use --threads=THREADS number of threads --http-proxy=HTTP_PROXY scan behind given proxy (format: 127.0.0.1:80) --tor scan behind default Tor --crawl crawl target url for other links to test --forms crawl target url looking for forms to test --user-agent=USER_AGENT provide an user agent --random-agent perform scan with random user agents --cookie=COOKIE use a cookie to perform scans --dom basic heuristic to detect dom xss
EXAMPLES:
Scanning a single url with GET params:
$ python xsssniper.py -u "http://target.com/index.php?page=test"
Scanning a single url with POST params:
$ python xsssniper.py -u "http://target.com/index.php" --post --data=POST_DATA
Crawl a single url looking for forms to scan:
$ python xsssniper.py -u "http://target.com" --forms
Mass scan an entire website:
$ python xsssniper.py -u "http://target.com" --crawl
Mass scan an entire website forms included:
$ python xsssniper.py -u "http://target.com" --crawl --forms
Analyze target page javascripts (embedded and linked) to search for common sinks and sources:
$ python xsssniper.py -u "http://target.com" --dom
THANKS:
- Miroslav Stamparm for the tips
- Claudio Telmon