What is XSS?

Cross site scripting (XSS) is an attack in which an attacker injects malicious executable scripts into the code of a trusted application or website.

Tool info

T-XSS is a XSS vulnerability scanner written in Python. This is how it works:

• Given a URL, it grabs all the HTML forms and then prints the number of forms detected.
• It then iterates all over the forms and submits the forms by putting the value of all text and search input fields with a Javascript code.
• If the Javascript code is injected and successfully executed, then this is a clear sign that the web page is XSS vulnerable.

Installation of T-XSS

• apt update && apt upgrade
• pip install -r requirements.txt
• sudo apt install python (use pkg on Termux)
• sudo apt install git (use pkg on Termux)
• git clone https://github.com/ParzivalHack/T-XSS

Usage

• cd T-XSS
• python T-XSS.py

Update

• cd T-XSS
• bash update.sh

License

This tool is under the GPL v.3 License.