An advanced XSS (Cross-Site Scripting) vulnerability scanner built using Python and Selenium. This tool uses payloads to test URLs for XSS vulnerabilities by observing whether injected scripts can execute JavaScript alerts. It outputs both vulnerable and non-vulnerable URLs, allowing for efficient vulnerability analysis.
- Scans multiple URLs with XSS payloads.
- Supports multi-threading for faster scanning.
- Uses Selenium and Chrome WebDriver to detect alerts generated by XSS vulnerabilities.
- Saves the results to a specified output file.
- Python 3.6+
- Google Chrome (latest version recommended)
- ChromeDriver (automatically managed via
webdriver-manager)
git clone https://github.com/aungsanoo-usa/xss_scanner.gitcd xss_scannerpip3 install -r requirements.txtpython3 xss_scanner.pyThe script accepts the following command-line arguments:
- -l, --urls: Path to a file containing the list of URLs to scan.
- -p, --payloads: Path to a file containing XSS payloads.
- -o, --output: Path to the output file where vulnerable URLs will be saved.
python3 xss_scanner.py -l urls.txt -p xss_payloads.txt -o output.txtwget https://dl.google.com/linux/direct/google-chrome-stable_current_amd64.debsudo dpkg -i google-chrome-stable_current_amd64.deb- If you encounter any errors during installation, use the following command:
sudo apt -f installsudo dpkg -i google-chrome-stable_current_amd64.debwget https://chromedriver.storage.googleapis.com/114.0.5735.90/chromedriver_linux64.zipunzip chromedriver-linux64.zipcd chromedriver-linux64 sudo mv chromedriver /usr/binWarning
XSS Scanner is intended for educational and ethical hacking purposes only. It should only be used to test systems you own or have explicit permission to test. Unauthorized use of third-party websites or systems without consent is illegal and unethical.