anonre/xsshak-pro repository overview

⁠XSSHak-Pro

A powerful XSS callback catcher with Telegram integration.

⁠For VPS / Public Server Users

When running the Docker container, you MUST use your VPS's public IP address to get callback XSS.

⁠For Docker Users (General)

When running the Docker container, you MUST use your localhost IP address to get callback XSS.

⁠For Local Users (Running on Your Own Network)

When running the Docker container, you MUST use your machine IP address to get callback XSS.

⁠📥 Captured Callback Data Includes:

1. Payload Type
2. Target URL
3. Origin
4. Pathname
5. User Agent
6. Cookies
7. Local Storage
8. Referrer
9. Source IP
10. Timestamp

⁠🔥 XSS Detection

When a FIRE (indicating a successful XSS detection) is received, the tool provides:

- Complete callback information
- Screenshot of the vulnerable page
- Real-time delivery via Telegram chat

⁠🚀 How to Run

Command:

docker run --rm -it -p 5123:5123 anonre/xsshak-pro -t <telegram_token> -c <telegram_chat_id>