You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
I'm assuming this tool isn't maintained anymore or decided to target some other vuln other than XSS, which would make the its name kind of unfortunate.
That or somethings gone wrong with mine as it couldn't find water if it fell out of a boat.
I even gave it the link to vulnerable DVWA page that i even left a working payload in it and it still can't find an XSS.
Surely i'm doing something wrong here. python3 xsstrike.py -u http://10.6.6.100/vulnerabilities/xss_r/?name=
[~] Checking for DOM vulnerabilities
[+] WAF Status: Offline
[!] Testing parameter: name
[-] No reflection found
XSStrike v3.1.5
[~] Checking for DOM vulnerabilities
[-] No parameters to test.
[~] Checking for DOM vulnerabilities
[~] Checking for DOM vulnerabilities
[+] WAF Status: Offline
[+] WAF Status: Offline
[!] Testing parameter: name
[!] Testing parameter: name
[-] No reflection found
[-] No reflection found
The text was updated successfully, but these errors were encountered:
even if it does find something, it just parses out some nonsense payloads with maximum confidence, like:
[+] Payload: <hTmL/+/ONPointEreNTEr%0a=%0aconfirm()%0dx//
[!] Efficiency: 92
[!] Confidence: 10
and they never work.
I'm assuming this tool isn't maintained anymore or decided to target some other vuln other than XSS, which would make the its name kind of unfortunate.
That or somethings gone wrong with mine as it couldn't find water if it fell out of a boat.
I even gave it the link to vulnerable DVWA page that i even left a working payload in it and it still can't find an XSS.
Surely i'm doing something wrong here.
python3 xsstrike.py -u http://10.6.6.100/vulnerabilities/xss_r/?name=
The text was updated successfully, but these errors were encountered: