Book a Demo!
CoCalc Logo Icon
StoreFeaturesDocsShareSupportNewsAboutPoliciesSign UpSign In
Z4nzu
GitHub Repository: Z4nzu/hackingtool
 Path: blob/master/tools/xss_attack.py
1268 views
1
# coding=utf-8

2
import os

3
import subprocess

4


5
from core import HackingTool

6
from core import HackingToolsCollection

7


8


9
class Dalfox(HackingTool):

10
    TITLE = "DalFox(Finder of XSS)"

11
    DESCRIPTION = "XSS Scanning and Parameter Analysis tool."

12
    INSTALL_COMMANDS = [

13
        "sudo apt-get install golang",

14
        "sudo git clone https://github.com/hahwul/dalfox",

15
        "cd dalfox;go install"

16
    ]

17
    RUN_COMMANDS = [

18
        "~/go/bin/dalfox",

19
        'echo "You Need To Run manually by using [!]~/go/bin/dalfox [options]"'

20
    ]

21
    PROJECT_URL = "https://github.com/hahwul/dalfox"

22


23


24
class XSSPayloadGenerator(HackingTool):

25
    TITLE = "XSS Payload Generator"

26
    DESCRIPTION = "XSS PAYLOAD GENERATOR -XSS SCANNER-XSS DORK FINDER"

27
    INSTALL_COMMANDS = [

28
        "git clone https://github.com/capture0x/XSS-LOADER.git",

29
        "cd XSS-LOADER;sudo pip3 install -r requirements.txt"

30
    ]

31
    RUN_COMMANDS = ["cd XSS-LOADER;sudo python3 payloader.py"]

32
    PROJECT_URL = "https://github.com/capture0x/XSS-LOADER.git"

33


34


35
class XSSFinder(HackingTool):

36
    TITLE = "Extended XSS Searcher and Finder"

37
    DESCRIPTION = "Extended XSS Searcher and Finder"

38
    INSTALL_COMMANDS = [

39
        "git clone https://github.com/Damian89/extended-xss-search.git"]

40
    PROJECT_URL = "https://github.com/Damian89/extended-xss-search"

41


42
    def after_install(self):

43
        print("""\033[96m 

44
        Follow This Steps After Installation:-

45
            \033[31m [*] Go To extended-xss-search directory,

46
                and Rename the example.app-settings.conf to app-settings.conf

47
        """)

48
        input("Press ENTER to continue")

49


50
    def run(self):

51
        print("""\033[96m 

52
        You have To Add Links to scan

53
        \033[31m[!] Go to extended-xss-search

54
            [*] config/urls-to-test.txt

55
            [!] python3 extended-xss-search.py

56
        """)

57


58


59
class XSSFreak(HackingTool):

60
    TITLE = "XSS-Freak"

61
    DESCRIPTION = "XSS-Freak is an XSS scanner fully written in python3 from scratch"

62
    INSTALL_COMMANDS = [

63
        "git clone https://github.com/PR0PH3CY33/XSS-Freak.git",

64
        "cd XSS-Freak;sudo pip3 install -r requirements.txt"

65
    ]

66
    RUN_COMMANDS = ["cd XSS-Freak;sudo python3 XSS-Freak.py"]

67
    PROJECT_URL = "https://github.com/PR0PH3CY33/XSS-Freak"

68


69


70
class XSpear(HackingTool):

71
    TITLE = "XSpear"

72
    DESCRIPTION = "XSpear is XSS Scanner on ruby gems"

73
    INSTALL_COMMANDS = ["gem install XSpear"]

74
    RUN_COMMANDS = ["XSpear -h"]

75
    PROJECT_URL = "https://github.com/hahwul/XSpear"

76


77


78
class XSSCon(HackingTool):

79
    TITLE = "XSSCon"

80
    INSTALL_COMMANDS = [

81
        "git clone https://github.com/menkrep1337/XSSCon.git",

82
        "sudo chmod 755 -R XSSCon"

83
    ]

84
    PROJECT_URL = "https://github.com/menkrep1337/XSSCon"

85


86
    def run(self):

87
        website = input("Enter Website >> ")

88
        os.system("cd XSSCon;")

89
        subprocess.run(["python3", "xsscon.py", "-u", website])

90


91


92
class XanXSS(HackingTool):

93
    TITLE = "XanXSS"

94
    DESCRIPTION = "XanXSS is a reflected XSS searching tool\n " \

95
                  "that creates payloads based from templates"

96
    INSTALL_COMMANDS = ["git clone https://github.com/Ekultek/XanXSS.git"]

97
    PROJECT_URL = "https://github.com/Ekultek/XanXSS"

98


99
    def run(self):

100
        os.system("cd XanXSS ;python xanxss.py -h")

101
        print("\033[96m You Have to run it manually By Using\n"

102
              " [!]python xanxss.py [Options]")

103


104


105
class XSSStrike(HackingTool):

106
    TITLE = "Advanced XSS Detection Suite"

107
    DESCRIPTION = "XSStrike is a python script designed to detect and exploit XSS vulnerabilities."

108
    INSTALL_COMMANDS = [

109
        "sudo rm -rf XSStrike",

110
        "git clone https://github.com/UltimateHackers/XSStrike.git "

111
        "&& cd XSStrike && pip install -r requirements.txt"

112
    ]

113
    PROJECT_URL = "https://github.com/UltimateHackers/XSStrike"

114


115
    def __init__(self):

116
        super(XSSStrike, self).__init__(runnable = False)

117


118


119
class RVuln(HackingTool):

120
    TITLE = "RVuln"

121
    DESCRIPTION = "RVuln is multi-threaded and Automated Web Vulnerability " \

122
                  "Scanner written in Rust"

123
    INSTALL_COMMANDS = [

124
        "sudo git clone https://github.com/iinc0gnit0/RVuln.git;"

125
        "curl --proto '=https' --tlsv1.2 -sSf https://sh.rustup.rs | sh;"

126
        "source $HOME/.cargo/env;"

127
        "sudo apt install librust-openssl-dev;"

128
        "cd RVuln;sudo su;cargo build --release;mv target/release/RVuln"

129
    ]

130
    RUN_COMMANDS = ["RVuln"]

131
    PROJECT_URL = "https://github.com/iinc0gnit0/RVuln"

132


133


134
class XSSAttackTools(HackingToolsCollection):

135
    TITLE = "XSS Attack Tools"

136
    TOOLS = [

137
        Dalfox(),

138
        XSSPayloadGenerator(),

139
        XSSFinder(),

140
        XSSFreak(),

141
        XSpear(),

142
        XSSCon(),

143
        XanXSS(),

144
        XSSStrike(),

145
        RVuln()

146
    ]

147


148