rajeshmajumdar / brutexss

BruteXSS is a tool written in python simply to find XSS vulnerabilities in web application. This tool was originally developed by Shawar Khan in CLI. I just redesigned it and made it GUI for more convienience.

Hi there 👋, I am Rajesh_

- A developer who manages risk_

👨‍🎤 23 years old_

🛠 Python3/ASM/Rust/C/CPP_

📖 Some random stuff_

brutexss's Issues

python issue

Exception in thread Thread-1:
Traceback (most recent call last):
File "/usr/lib/python2.7/threading.py", line 801, in __bootstrap_inner
self.run()
File "/usr/lib/python2.7/threading.py", line 754, in run
self.__target(*self.__args, **self.__kwargs)
File "brutexss.py", line 240, in execute
postchecked = postmethodchecked.get()
File "/usr/lib/python2.7/lib-tk/Tkinter.py", line 379, in get
return getint(self._tk.globalgetvar(self._name))
RuntimeError: main thread is not in main loop

用图形界面的都是基佬[/滑稽][/滑稽]

Python stopped

hey when i open tool and put the target url and put the path of word list
if the site is vuln with xss it say to me python 2 has stopped and the tool close

Not very applicable

Use python3 but can't use
problem:C:\Users\IsLab\Desktop\ingect\BruteXSS-master>py brutexss.py
File "brutexss.py", line 490
print 'Nothing happened'
^
SyntaxError: Missing parentheses in call to 'print'. Did you mean print('Nothing happened')?

Missing parentheses on print calls & missing tkk module

Missing parentheses on print calls as visible on line 490 & 515.
Module TKK from tkinter.tkk not found on import.

How to run it?

my machine has already configured the python environment. when I click brutexss.py,nothing happened.I open cmd and cd it's directory，and then input brutexss.py,it reply

File "C:\Users\Administrator\Desktop\BruteXSS-master\brutexss.py", line 490
print 'Nothing happened'
^
SyntaxError: Missing parentheses in call to 'print'. Did you mean print('Nothing happened')?

what should I do to run it?help me,please!

Help me

http://prntscr.com/jw0m6t Help me

License vs. screenshots???

This screenshot doesn't make any sense given the license:

https://github.com/rajeshmajumdar/BruteXSS/blob/master/LICENSE

Not very applicable

When I built my own page to experiment with the brutexss like this “".$input.""; ?>” It can successfully detect XSS vulnerabilities。However, when I use it on dvwa platform(security:low; moudle:xss reflected),the brutexss can't successfully detect XSS vulnerabilities.So I don't consider it's very applicable.

Can you add link to original CLI tool?

https://github.com/shawarkhanethicalhacker/BruteXSS

Thanks

Background

The background is black on MacOS, which makes it impossible to see with the black menu elements.