0x1 Posted October 14, 2019 Share Posted October 14, 2019 Automated Vulnerability Scanner for XSS | Written in Python3 | Utilizes Selenium Headless This is the hidden content, please Sign In or Sign Up Traxss is a Hacktoberfest Project! If you are looking for a place to make contribute, please feel free. Traxss is an automated framework to scan URLs and webpages for XSS Vulnerabilities. It includes over 575 Payloads to test with and multiple options for robustness of tests. View the gif above to see a preview of the fastest type of scan. Getting Started Prerequisites Traxss depends on Chromedriver. On MacOS this can be installed with the homebrew command: This is the hidden content, please Sign In or Sign Up Installation Run the command: This is the hidden content, please Sign In or Sign Up Running Traxss Traxx can be started with the command: This is the hidden content, please Sign In or Sign Up This will launch an interactive CLI to guide you through the process. Types of Scans Full Scan w/ HTML Uses a query scan with 575+ payloads and attempts to find XSS vulnerabilities by passing parameters through the URL. It will also render the HTML and attempt to find manual XSS Vulnerablities (this feature is still in beta). Full Scan w/o HTML This scan will run the query scan only. Fast Scan w/ HTML This scan is the same as the full w/ HTML but it will only use 7 attack vectors rather than the 575+ vectors. Fast Scan w/o HTML This scan is the same as the fast w/o HTML but it will only use 7 attack vectors rather than the 575+ vectors. More info && Download This is the hidden content, please Sign In or Sign Up Link to comment Share on other sites More sharing options...
Recommended Posts