How To Find XSS (Advance bug bounty)

Hello Guys Welcome back

I hope You all are good. So let’s start..

We will use some tools which is kxss and dalfox , waybackurls

 

kxss

This tool is Go based For finding xss perameters it will help you to find some xss perameters with closing tag So let’s have a look

Command : echo domain.com | waybackurls | kxss

Dalfox

DalFox is a fast, powerful parameter analysis and XSS scanner, based on a golang/DOM parser. supports friendly Pipeline, CI/CD and testing of different types of XSS. I talk about naming. Dal() is the Korean pronunciation of moon and fox was made into Fox(Find Of XSS).

command : assetfinder testphp.vulnweb.com | gau | dalfox pipe

Thanks

Leave a Reply