renwax23 / xsstron Goto Github PK

View Code? Open in Web Editor NEW

673.0 673.0 118.0 840 KB

Electron JS Browser To Find XSS Vulnerabilities Automatically

License: GNU General Public License v3.0

JavaScript 96.95% HTML 2.19% CSS 0.86%

xsstron's People

Contributors

Stargazers

Watchers

Forkers

attacker-codeninja bbhunter d1pakda5 daniyyell m00zh33 dskho inspectordidi raystyle xkind3r st3kz vinodg7289 daffodi1 ethancck ravkishu rajivraj jermainlaforce elamaran619 deepanjalkumar shantanu561993 l34rner noobsdt lurans chaos-monkey-island iqzer0 kakuye nuriakman ramihub slooppe hobaiguigui doytsujin parad0x-0xff sofienelkamel soufianetahiri marciopocebon tusharkeshav xalgord ltidi2000 inyongnation faisalrathore93 chouaibhm csmagee99 ndbrain sh1nu11bi irivera007 crackercat sashka3076 sageof6iixpaths redbouk c0axial ktzgraph safisec gh0st0ne anthrax3 xul4y avasdream vincent5753 repo4chu hatchetxuexi jayway007 caketi tehseensagar ankurvaishley fabiopw aviadhahami inosec2 securestep9 sergrych saurabhm74 vishal9066 muhaprime syedahiraamjad tommalvoriddle dutchcyberguy hackerajofficial kenyannoob polling-repo-continua marcoshat mhasan411 demon1k latkes okaayfine excloudx6 huangzccn mounika20 darkoneiroi flyg33k gprime31 smz8023 justinforbes xinxiemy airahc epthewizard securitystuffbackup 0xsojalsec snowie0x45 k4ll4h4r1sh-ltc 5l1v3r1 ms-f001 haxormad haka110

xsstron's Issues

How To Install this please show a demo video

Unable to start project both in linux and windows

C:\Users......\Documents\My_list\XSSTRON>npm install
npm WARN saveError ENOENT: no such file or directory, open 'C:\Users.........\Documents\My_list\XSSTRON\package.json'
npm WARN enoent ENOENT: no such file or directory, open 'C:\Users...........\Documents\My_list\XSSTRON\package.json'
npm WARN XSSTRON No description
npm WARN XSSTRON No repository field.
npm WARN XSSTRON No README data
npm WARN XSSTRON No license field.

up to date in 0.396s
found 0 vulnerabilities

C:\Users........\Documents\My_list\XSSTRON>npm start
npm ERR! code ENOENT
npm ERR! syscall open
npm ERR! path C:\Users.....\Documents\My_list\XSSTRON\package.json
npm ERR! errno -4058
npm ERR! enoent ENOENT: no such file or directory, open 'C:\Users.......\Documents\My_list\XSSTRON\package.json'
npm ERR! enoent This is related to npm not being able to find a file.
npm ERR! enoent

npm ERR! A complete log of this run can be found in:
npm ERR! C:\Users.........\AppData\Roaming\npm-cache_logs\2021-02-03T06_41_20_529Z-debug.log

[email protected] start
electron .

[1865:0203/014611.704918:FATAL:electron_main_delegate.cc(254)] Running as root without --no-sandbox is not supported. See https://crbug.com/638180.
/root/XSSTRON/node_modules/electron/dist/electron exited with signal SIGTRAP
npm ERR! code 1
npm ERR! path /root/XSSTRON
npm ERR! command failed
npm ERR! command sh -c electron .

npm ERR! A complete log of this run can be found in:
npm ERR! /root/.npm/_logs/2021-02-03T06_46_11_722Z-debug.log

About this tool

Hey man , Can we add more XSS polygots right ? .

add

is it possible to add our own list of XSS also blind XSS payload

Getting below error while running the app , any idea ?

/XSSTRON/node_modules/electron/dist/electron exited with signal SIGTRAP
npm ERR! code ELIFECYCLE
npm ERR! errno 1
npm ERR! [email protected] start: electron .
npm ERR! Exit status 1
npm ERR!
npm ERR! Failed at the [email protected] start script.
npm ERR! This is probably not a problem with npm. There is likely additional logging output above.

npm ERR! A complete log of this run can be found in:

Issue Running On Kali

I followed all directions on Known issues for Kali and still when I bring up the browser cant type address in bar, just sits idle, nothing works.

Unable to start project

Hi!

I cannot test your project, command npm start failed.

Env Summary

OS: Darwin Kernel Version 20.3.0: Thu Jan 21 00:07:06 PST 2021; root:xnu-7195.81.3~1/RELEASE_X86_64
Node: 14.15.2
Npm: 6.14.9

Error

❯ npm start

> [email protected] start ~/RenwaX23/XSSTRON
> electron .

~/RenwaX23/XSSTRON/node_modules/electron/dist/Electron.app/Contents/MacOS/Electron exited with signal SIGSEGV

Check post xss on secondary page

In example i have POST request
site.com/edit-account.php?username=1

And after that submit i need to check on another page site.com/myaccount.php is the xss is executed. , like --second-order in sqlmap

Er

Getting this error on Kali

Here is the log file

0 verbose cli [ '/usr/bin/node', '/usr/bin/npm', 'install' ]
1 info using [email protected]
2 info using [email protected]
3 timing config:load:defaults Completed in 2ms
4 timing config:load:file:/usr/share/nodejs/npm/npmrc Completed in 1ms
5 timing config:load:builtin Completed in 1ms
6 timing config:load:cli Completed in 1ms
7 timing config:load:env Completed in 1ms
8 timing config:load:file:/home/kali/XSSTRON/.npmrc Completed in 0ms
9 timing config:load:project Completed in 0ms
10 timing config:load:file:/root/.npmrc Completed in 0ms
11 timing config:load:user Completed in 0ms
12 timing config:load:file:/etc/npmrc Completed in 1ms
13 timing config:load:global Completed in 1ms
14 timing config:load:cafile Completed in 0ms
15 timing config:load:validate Completed in 0ms
16 timing config:load:setUserAgent Completed in 0ms
17 timing config:load:setEnvs Completed in 1ms
18 timing config:load Completed in 7ms
19 verbose npm-session 87a8f9968da7795b
20 timing npm:load Completed in 14ms
21 timing arborist:ctor Completed in 1ms
22 timing idealTree:init Completed in 91ms
23 timing idealTree:userRequests Completed in 0ms
24 silly idealTree buildDeps
25 silly fetch manifest electron@^10.0
26 http fetch GET 304 https://registry.npmjs.org/electron 1281ms (from cache)
27 silly placeDep ROOT [email protected] REPLACE for: [email protected] want: ^10.0
28 timing idealTree:#root Completed in 1295ms
29 timing idealTree:node_modules/electron Completed in 0ms
30 timing idealTree:buildDeps Completed in 1296ms
31 timing idealTree:fixDepFlags Completed in 2ms
32 timing idealTree Completed in 1391ms
33 timing reify:loadTrees Completed in 1391ms
34 timing reify:diffTrees Completed in 1ms
35 silly reify moves {}
36 timing reify:retireShallow Completed in 0ms
37 timing reify:createSparse Completed in 169ms
38 timing reify:loadBundles Completed in 0ms
39 timing reifyNode:node_modules/wrappy Completed in 297ms
40 timing reifyNode:node_modules/universalify Completed in 298ms
41 timing reifyNode:node_modules/url-parse-lax Completed in 298ms
42 timing reifyNode:node_modules/to-readable-stream Completed in 297ms
43 timing reifyNode:node_modules/process-nextick-args Completed in 298ms
44 timing reifyNode:node_modules/prepend-http Completed in 298ms
45 timing reifyNode:node_modules/once Completed in 298ms
46 timing reifyNode:node_modules/sumchecker/node_modules/ms Completed in 298ms
47 timing reifyNode:node_modules/npm-conf/node_modules/pify Completed in 298ms
48 timing reifyNode:node_modules/ms Completed in 298ms
49 timing reifyNode:node_modules/mimic-response Completed in 298ms
50 timing reifyNode:node_modules/lowercase-keys Completed in 298ms
51 timing reifyNode:node_modules/ini Completed in 298ms
52 timing reifyNode:node_modules/end-of-stream Completed in 298ms
53 timing reifyNode:node_modules/duplexer3 Completed in 298ms
54 timing reifyNode:node_modules/decompress-response Completed in 298ms
55 timing reifyNode:node_modules/buffer-from Completed in 298ms
56 timing reifyNode:node_modules/buffer-crc32 Completed in 298ms
57 timing reifyNode:node_modules/@electron/get/node_modules/ms Completed in 299ms
58 timing reifyNode:node_modules/lru-cache Completed in 302ms
59 timing reifyNode:node_modules/config-chain Completed in 302ms
60 timing reifyNode:node_modules/serialize-error Completed in 305ms
61 timing reifyNode:node_modules/pend Completed in 305ms
62 timing reifyNode:node_modules/p-cancelable Completed in 305ms
63 timing reifyNode:node_modules/normalize-url Completed in 305ms
64 timing reifyNode:node_modules/matcher Completed in 305ms
65 timing reifyNode:node_modules/inherits Completed in 305ms
66 timing reifyNode:node_modules/get-stream Completed in 304ms
67 timing reifyNode:node_modules/env-paths Completed in 305ms
68 timing reifyNode:node_modules/escape-string-regexp Completed in 305ms
69 timing reifyNode:node_modules/encodeurl Completed in 305ms
70 timing reifyNode:node_modules/detect-node Completed in 305ms
71 timing reifyNode:node_modules/cacheable-request/node_modules/lowercase-keys Completed in 305ms
72 timing reifyNode:node_modules/yallist Completed in 309ms
73 timing reifyNode:node_modules/responselike Completed in 309ms
74 timing reifyNode:node_modules/jsonfile Completed in 309ms
75 timing reifyNode:node_modules/http-cache-semantics Completed in 309ms
76 timing reifyNode:node_modules/clone-response Completed in 308ms
77 timing reifyNode:node_modules/@szmarczak/http-timer Completed in 308ms
78 timing reifyNode:node_modules/yauzl Completed in 312ms
79 timing reifyNode:node_modules/util-deprecate Completed in 312ms
80 timing reifyNode:node_modules/keyv Completed in 311ms
81 timing reifyNode:node_modules/concat-stream/node_modules/safe-buffer Completed in 310ms
82 timing reifyNode:node_modules/proto-list Completed in 314ms
83 timing reifyNode:node_modules/defer-to-connect Completed in 313ms
84 timing reifyNode:node_modules/cacheable-request/node_modules/get-stream Completed in 312ms
85 timing reifyNode:node_modules/pump Completed in 316ms
86 timing reifyNode:node_modules/graceful-fs Completed in 315ms
87 timing reifyNode:node_modules/extract-zip Completed in 315ms
88 timing reifyNode:node_modules/concat-stream/node_modules/string_decoder Completed in 314ms
89 timing reifyNode:node_modules/concat-stream Completed in 314ms
90 timing reifyNode:node_modules/mkdirp Completed in 318ms
91 timing reifyNode:node_modules/concat-stream/node_modules/isarray Completed in 318ms
92 timing reifyNode:node_modules/json-buffer Completed in 321ms
93 timing reifyNode:node_modules/core-util-is Completed in 321ms
94 timing reifyNode:node_modules/utf8-byte-length Completed in 325ms
95 timing reifyNode:node_modules/progress Completed in 324ms
96 timing reifyNode:node_modules/sumchecker/node_modules/debug Completed in 324ms
97 timing reifyNode:node_modules/cacheable-request Completed in 322ms
98 timing reifyNode:node_modules/@electron/get/node_modules/debug Completed in 323ms
99 timing reifyNode:node_modules/@sindresorhus/is Completed in 324ms
100 timing reifyNode:node_modules/semver-compare Completed in 329ms
101 timing reifyNode:node_modules/fd-slicer Completed in 328ms
102 timing reifyNode:node_modules/truncate-utf8-bytes Completed in 330ms
103 timing reifyNode:node_modules/json-stringify-safe Completed in 329ms
104 timing reifyNode:node_modules/es6-error Completed in 329ms
105 timing reifyNode:node_modules/sanitize-filename Completed in 331ms
106 timing reifyNode:node_modules/typedarray Completed in 335ms
107 timing reifyNode:node_modules/npm-conf Completed in 333ms
108 timing reifyNode:node_modules/global-tunnel-ng Completed in 333ms
109 timing reifyNode:node_modules/define-properties/node_modules/object-keys Completed in 334ms
110 timing reifyNode:node_modules/boolean Completed in 334ms
111 timing reifyNode:node_modules/define-properties Completed in 336ms
112 timing reifyNode:node_modules/sprintf-js Completed in 339ms
113 timing reifyNode:node_modules/tunnel Completed in 340ms
114 timing reifyNode:node_modules/debug Completed in 343ms
115 timing reifyNode:node_modules/sumchecker Completed in 349ms
116 timing reifyNode:node_modules/minimist Completed in 349ms
117 timing reifyNode:node_modules/got Completed in 350ms
118 timing reifyNode:node_modules/globalthis Completed in 351ms
119 timing reifyNode:node_modules/electron Completed in 353ms
120 timing reifyNode:node_modules/roarr Completed in 358ms
121 timing reifyNode:node_modules/type-fest Completed in 359ms
122 timing reifyNode:node_modules/concat-stream/node_modules/readable-stream Completed in 358ms
123 timing reifyNode:node_modules/global-agent/node_modules/semver Completed in 378ms
124 timing reifyNode:node_modules/fs-extra Completed in 381ms
125 timing reifyNode:node_modules/@electron/get Completed in 382ms
126 timing reifyNode:node_modules/@types/node Completed in 387ms
127 timing reifyNode:node_modules/global-agent Completed in 395ms
128 timing reifyNode:node_modules/lodash Completed in 618ms
129 timing reifyNode:node_modules/core-js Completed in 701ms
130 timing reify:unpack Completed in 704ms
131 timing reify:unretire Completed in 0ms
132 timing build:queue Completed in 7ms
133 timing build:link:node_modules/electron Completed in 2ms
134 timing build:link:node_modules/extract-zip Completed in 2ms
135 timing build:link:node_modules/global-agent/node_modules/semver Completed in 2ms
136 timing build:link:node_modules/mkdirp Completed in 2ms
137 timing build:link Completed in 3ms
138 info run [email protected] postinstall node_modules/core-js node -e "try{require('./postinstall')}catch(e){}"
139 info run [email protected] postinstall node_modules/electron node install.js
140 info run [email protected] postinstall { code: 0, signal: null }
141 timing build:run:postinstall:node_modules/core-js Completed in 79ms
142 http fetch POST 200 https://registry.npmjs.org/-/npm/v1/security/advisories/bulk 1251ms
143 timing auditReport:getReport Completed in 1253ms
144 timing metavuln:cache:get:security-advisory:lodash:QECQhqENwQoNVl6da4JbJcLbJD29giB5sLJN+gaFqW+TzG4UNvuVAr/wBc9mvIFVshry+iHa5VIaBdTVItbLtg== Completed in 16ms
145 http fetch GET 304 https://registry.npmjs.org/lodash 247ms (from cache)
146 timing metavuln:packument:lodash Completed in 250ms
147 timing metavuln:load:security-advisory:lodash:1673 Completed in 3ms
148 timing metavuln:calculate:security-advisory:lodash:1673 Completed in 257ms
149 timing metavuln:cache:get:security-advisory:global-tunnel-ng:D5CWMYQ/e62QpYXbX+2XNNLwIlZsYz6VBwLOpR49Ymfbu0dv4pBQ5G/lukeeypPU0l5wwzFB4uRs4fQHLAt/Vw== Completed in 5ms
150 http fetch GET 304 https://registry.npmjs.org/global-tunnel-ng 273ms (from cache)
151 timing metavuln:packument:global-tunnel-ng Completed in 276ms
152 timing metavuln:load:security-advisory:global-tunnel-ng:QECQhqENwQoNVl6da4JbJcLbJD29giB5sLJN+gaFqW+TzG4UNvuVAr/wBc9mvIFVshry+iHa5VIaBdTVItbLtg== Completed in 0ms
153 timing metavuln:calculate:security-advisory:global-tunnel-ng:QECQhqENwQoNVl6da4JbJcLbJD29giB5sLJN+gaFqW+TzG4UNvuVAr/wBc9mvIFVshry+iHa5VIaBdTVItbLtg== Completed in 277ms
154 timing auditReport:init Completed in 542ms
155 timing reify:audit Completed in 1797ms
156 info run [email protected] postinstall { code: 1, signal: null }
157 timing reify:rollback:createSparse Completed in 183ms
158 timing reify:rollback:retireShallow Completed in 0ms
159 timing command:install Completed in 336234ms
160 verbose stack Error: command failed
160 verbose stack     at ChildProcess.<anonymous> (/usr/share/nodejs/@npmcli/promise-spawn/index.js:64:27)
160 verbose stack     at ChildProcess.emit (events.js:314:20)
160 verbose stack     at maybeClose (internal/child_process.js:1022:16)
160 verbose stack     at Process.ChildProcess._handle.onexit (internal/child_process.js:287:5)
161 verbose pkgid [email protected]
162 verbose cwd /home/kali/XSSTRON
163 verbose Linux 5.10.0-kali7-amd64
164 verbose argv "/usr/bin/node" "/usr/bin/npm" "install"
165 verbose node v12.21.0
166 verbose npm  v7.5.2
167 error code 1
168 error path /home/kali/XSSTRON/node_modules/electron
169 error command failed
170 error command sh -c node install.js
171 error Error: EACCES: permission denied, stat '/root/.cache/electron/httpsgithub.comelectronelectronreleasesdownloadv10.4.7SHASUMS256.txt/SHASUMS256.txt'
172 verbose exit 1

Not working on Ubuntu

0 info it worked if it ends with ok
1 verbose cli [ '/usr/bin/node', '/usr/bin/npm', 'start' ]
2 info using [email protected]
3 info using [email protected]
4 verbose run-script [ 'prestart', 'start', 'poststart' ]
5 info lifecycle [email protected]prestart: [email protected]
6 info lifecycle [email protected]start: [email protected]
7 verbose lifecycle [email protected]start: unsafe-perm in lifecycle true
8 verbose lifecycle [email protected]start: PATH: /usr/share/npm/node_modules/npm-lifecycle/node-gyp-bin:/home/soufiane/Tools/XSS/XSSTRON/node_modules/.bin:/home/soufiane/.local/bin:/home/soufiane/.rvm/gems/ruby-3.0.0/bin:/home/soufiane/.rvm/gems/ruby-3.0.0@global/bin:/usr/share/rvm/rubies/ruby-3.0.0/bin:/home/soufiane/.local/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/usr/games:/usr/local/games:/snap/bin:/usr/share/rvm/bin
9 verbose lifecycle [email protected]start: CWD: /home/soufiane/Tools/XSS/XSSTRON
10 silly lifecycle [email protected]start: Args: [ '-c', 'electron .' ]
11 silly lifecycle [email protected]start: Returned: code: 1 signal: null
12 info lifecycle [email protected]start: Failed to exec start script
13 verbose stack Error: [email protected] start: electron .
13 verbose stack Exit status 1
13 verbose stack at EventEmitter. (/usr/share/npm/node_modules/npm-lifecycle/index.js:332:16)
13 verbose stack at EventEmitter.emit (events.js:198:13)
13 verbose stack at ChildProcess. (/usr/share/npm/node_modules/npm-lifecycle/lib/spawn.js:55:14)
13 verbose stack at ChildProcess.emit (events.js:198:13)
13 verbose stack at maybeClose (internal/child_process.js:982:16)
13 verbose stack at Process.ChildProcess._handle.onexit (internal/child_process.js:259:5)
14 verbose pkgid [email protected]
15 verbose cwd /home/soufiane/Tools/XSS/XSSTRON
16 verbose Linux 5.4.0-60-generic
17 verbose argv "/usr/bin/node" "/usr/bin/npm" "start"
18 verbose node v10.19.0
19 verbose npm v6.14.4
20 error code ELIFECYCLE
21 error errno 1
22 error [email protected] start: electron .
22 error Exit status 1
23 error Failed at the [email protected] start script.
23 error This is probably not a problem with npm. There is likely additional logging output above.
24 verbose exit [ 1, true ]

Getting This Error

npm start

[email protected] start
electron .

/home/user/XSSTRON/node_modules/electron/dist/electron exited with signal SIGSEGV

I Don't now what to do from Here ??

Arbitrary code execution

Steps to reproduce:

Click Mass URL Scan
Paste payload http://<img onerror="require('child_process').spawn('calc.exe')" src>
Click Submit
Boom! Calculator!

Payload is for Windows.

Error while running the nmp install & nmp start

Hello, I'm facing this error while iinstalling the tool,

sudo npm install
[sudo] password for kali:

[email protected] postinstall /home/kali/XSSTRON/node_modules/core-js
node -e "try{require('./postinstall')}catch(e){}"

Thank you for using core-js ( https://github.com/zloirock/core-js ) for polyfilling JavaScript standard library!

The project needs your help! Please consider supporting of core-js on Open Collective or Patreon:

https://opencollective.com/core-js
https://www.patreon.com/zloirock

Also, the author of core-js ( https://github.com/zloirock ) is looking for a good job -)

[email protected] postinstall /home/kali/XSSTRON/node_modules/electron
node install.js
Downloading electron-v11.2.0-linux-x64.zip: [====================================================================================================] 100% ETA: 0.0 seconds
Error: EACCES: permission denied, stat '/root/.cache/electron/httpsgithub.comelectronelectronreleasesdownloadv11.2.0SHASUMS256.txt/SHASUMS256.txt'
npm WARN [email protected] No repository field.
npm WARN [email protected] license should be a valid SPDX license expression

npm ERR! code ELIFECYCLE
npm ERR! errno 1
npm ERR! [email protected] postinstall: node install.js
npm ERR! Exit status 1
npm ERR!
npm ERR! Failed at the [email protected] postinstall script.
npm ERR! This is probably not a problem with npm. There is likely additional logging output above.

npm ERR! A complete log of this run can be found in:
npm ERR! /root/.npm/_logs/2021-02-02T06_58_07_492Z-debug.log
kali@kali:/XSSTRON$
kali@kali:/XSSTRON$ sudo npm start

[email protected] start /home/kali/XSSTRON
electron .

sh: 1: electron: not found
npm ERR! code ELIFECYCLE
npm ERR! syscall spawn
npm ERR! file sh
npm ERR! errno ENOENT
npm ERR! [email protected] start: electron .
npm ERR! spawn ENOENT
npm ERR!
npm ERR! Failed at the [email protected] start script.
npm ERR! This is probably not a problem with npm. There is likely additional logging output above.

npm ERR! A complete log of this run can be found in:
npm ERR! /root/.npm/_logs/2021-02-02T06_58_21_984Z-debug.log

Gggggg

Error while using Mass Scan

npm ERR! code 3221225477
npm ERR! path C:\Users\pra27\Desktop\XSSTRON-main
npm ERR! command failed
npm ERR! command C:\Windows\system32\cmd.exe /d /s /c electron .

npm ERR! A complete log of this run can be found in:
npm ERR! C:\Users\pra27\AppData\Local\npm-cache_logs\2021-02-15T17_53_05_021Z-debug.log

Error install on Mac

I got error while installing xsstron on mac 10.14

thecrott$ sudo npm install

> [email protected] postinstall /Users/aldothecrott/hackingtools/XSSTRON/node_modules/core-js
> node -e "try{require('./postinstall')}catch(e){}"

Thank you for using core-js ( https://github.com/zloirock/core-js ) for polyfilling JavaScript standard library!

The project needs your help! Please consider supporting of core-js on Open Collective or Patreon:
> https://opencollective.com/core-js
> https://www.patreon.com/zloirock

Also, the author of core-js ( https://github.com/zloirock ) is looking for a good job -)

> [email protected] postinstall /Users/aldothecrott/hackingtools/XSSTRON/node_modules/electron
> node install.js

Error: EACCES: permission denied, mkdir '/Users/aldothecrott/hackingtools/XSSTRON/node_modules/electron/dist'
npm WARN [email protected] No repository field.
npm WARN [email protected] license should be a valid SPDX license expression

npm ERR! code ELIFECYCLE
npm ERR! errno 1
npm ERR! [email protected] postinstall: `node install.js`
npm ERR! Exit status 1
npm ERR!
npm ERR! Failed at the [email protected] postinstall script.
npm ERR! This is probably not a problem with npm. There is likely additional logging output above.

npm ERR! A complete log of this run can be found in:
npm ERR!     /Users/aldothecrott/.npm/_logs/2021-02-15T07_34_00_184Z-debug.log

This is node and npm version I use

XSSTRON thecrott$ npm -v
6.10.0
XSSTRON thecrott$ node -v
v10.15.3

External URL in XSS test cases

In order to test for XSS vulnerabilities via an Electron application running locally, this project should not use external, out of end-user control XSS payloads hosted on third-party services such as the one present in xss.html.

XSSTRON/xss.html

Line 26 in 02ab3e7

var ujs1 = `///xsstron.herokuapp.com/x.php`

XSSTRON/xssp.html

Line 27 in 02ab3e7

var ujs1 = `///qrsha.000webhostapp.com/xsstron.php`

The website opens but the XSS found page does not open

Issues: The default of contextIsolation is deprecated and will be changing from false to true in a future release of Electron.

libva error: /usr/lib/x86_64-linux-gnu/dri/iHD_drv_video.so init failed

❯ npm start browser.html

> [email protected] start
> electron . "browser.html"

libva error: /usr/lib/x86_64-linux-gnu/dri/iHD_drv_video.so init failed

Tool breaks

Hey

First of all it is a very good tool for finding xss
the tool breaks when given more than 500 urls to test

Kali problem

npm start

[email protected] start
electron .

[96289:0411/192138.530834:FATAL:setuid_sandbox_host.cc(158)] The SUID sandbox helper binary was found, but is not configured correctly. Rather than run without sandboxing I'm aborting now. You need to make sure that /home/kevin/Scripts/XSS/XSSTRON/node_modules/electron/dist/chrome-sandbox is owned by root and has mode 4755.
/home/kevin/Scripts/XSS/XSSTRON/node_modules/electron/dist/electron exited with signal SIGTRAP
npm ERR! code 1
npm ERR! path /home/kevin/Scripts/XSS/XSSTRON
npm ERR! command failed
npm ERR! command sh -c electron .

npm ERR! A complete log of this run can be found in:
npm ERR! /home/kevin/.npm/_logs/2021-04-11T23_21_38_544Z-debug.log

Another vay:
I made all instructions here:
sudo apt install npm
sudo npm install -g electron --unsafe-perm=true --allow-root
cd XSSTRON
sudo npm install
electron . --no-sandbox

BUT all I have is:
https://imgur.com/jCD6RV2.png - it doesn't work. It can't go any site.

Please Help

Suspicious dependency in package.json

what's the purpose of the following dependency listed in your package.json ?
this library isn't being used by your project and it doesn't have a reference to any GitHub repository.

XSSTRON/package.json

Line 22 in 02ab3e7

"module_name": "^1.0.0"

the current source code of the dependency is the following:

var http = require('http');

http.createServer(function (request, response) {

	// 发送 HTTP 头部 
	// HTTP 状态值: 200 : OK
	// 内容类型: text/plain
	response.writeHead(200, {'Content-Type': 'text/plain'});

	// 发送响应数据 "Hello World"
	response.end('Hello World\n');
}).listen(8888);

// 终端打印如下信息
console.log('Server running at http://127.0.0.1:8888/');

and its package.json

{
  "name": "module_name",
  "version": "1.0.0",
  "description": "dis中文",
  "main": "index.js",
  "dependencies": {
    "express": "^4.13.4"
  },
  "devDependencies": {},
  "scripts": {
    "test": "make test",
    "start": "node server.js"
  },
  "author": "stay",
  "license": "ISC"
}

electron broswer not working

Hi,
I am using linux i have some problems using your tool.
electron . --no-sandbox after hit this command open a browser but any function not working.

renwax23 / xsstron Goto Github PK

xsstron's People

Contributors

Stargazers

Watchers

Forkers

xsstron's Issues

Env Summary

Error

Recommend Projects

Recommend Topics

Recommend Org