leonsec/xssbot repository overview

⁠leonsec/xssbot

This XSSBot uses selenium to simulate the browser for access to trigger XSS.

• Github：https://github.com/Le0nsec/xssbot⁠

⁠Environment

• Ubuntu 16.04
• Python 2.7.12
• Google Chrome 84.0.4147.89

⁠usage

• The xssbot will visit a provided url page, such as xssurllist.php

<?php
//xssurllist.php
...
$url = "http://xxxx";
//or
$url = $_GET['url'];
echo $url;
...
?>

• Then xssbot will extract the url in the webpage and add your custom cookie to visit