Home

Awesome

FinDOM-XSS

contributions welcome

FinDOM-XSS is a tool that allows you to finding for possible and/ potential DOM based XSS vulnerability in a fast manner.

<img src="https://user-images.githubusercontent.com/25837540/95422955-763fad00-096a-11eb-806f-890a23f0e479.png" alt="findom-xss">

Installation

$ git clone https://github.com/dwisiswant0/findom-xss.git --recurse-submodules

Dependencies: LinkFinder

Usage

To run the tool on a target, just use the following command.

$ ./findom-xss.sh https://domain.tld/about-us.html

This will run the tool against domain.tld.

URLs can also be piped to findom-xss and scan on them. For example:

$ cat urls.txt | ./findom-xss.sh

The second argument can be used to specify an output file.

$ ./findom-xss.sh https://domain.tld/about-us.html /path/to/output.txt

By default, output will be stored in the results/ directory in the repository with domain.tld.txt name.

License

FinDOM-XSS is licensed under the Apache. Take a look at the LICENSE for more information.

Thanks