XSStrike: XSS detection suite(github.com) |
XSStrike: XSS detection suite(github.com) |
* (yes, yes, you're not banned from the Internet, but you'll be surprised by all the sites you visit that sit behind Akamai)
Some ISPs are relatively easy to get a new IP address on, others are rather difficult, so don't be dumb, use protection: a VPN.
Running a tool like this against your favorite websites, is a simple way of getting banned from your favorite websites.
Ruin your internet for yourself, if you have to run such tools on public websites. You shouldn't anyway.
My point here is was just that this is a somewhat dangerous tool to start just aiming at random websites. Probably a fair amount of people here that don't understand the full ramifications of their actions.
If you're running out against an Akamai or Cloudfoare reverse proxy in front of your website, then sure. If not, no; they don't have wiretaps.
Thx for the oss contribution-Looking forward to trying this out
“...payload generator generates patloads which are...” patloads -> payloads.
“...flaunting it's genius backend.” it’s -> its.
> Throw away your paid tools because this is some God level shit. Now with 4 hand written parsers, an intelligent payload generator, powerful fuzzing engine, DOM scanner, hidden parameter discovery and an incredibly fast crawler. F*cking retweet it!
- https://twitter.com/s0md3v/status/1061255510677057537
> Exactly, that's why you have no idea how it works and all. Well, it took me a month and being a developer of 30+ open source software, this is the first time I am saying this is some God level shit and I mean it.
Not sure testimonials from the dev themselves mean anything.