kxss
Finds query parameters that reflect in the response. Pipe gau/waymore into it, then hand the hits to dalfox or a manual DOM check.
Tags: xss, reflection, tomnomnom
- Category
- inject
- Maintenance signal
- slow
Install
go
go install github.com/Emoe/kxss@latestCommand templates
From URL corpus
cat {input} | kxss