FinDOM-XSS
![contributions welcome](https://img.shields.io/badge/contributions-welcome-brightgreen.svg?style=flat)
FinDOM-XSS is a tool that allows you to finding for possible and/ potential DOM based XSS vulnerability in a fast manner.
Installation
$ git clone https://github.com/dwisiswant0/findom-xss.git --recurse-submodules
Dependencies: LinkFinder
Usage
To run the tool on a target, just use the following command.
$ ./findom-xss.sh https://domain.tld/about-us.html
This will run the tool against domain.tld
.
URLs can also be piped to findom-xss and scan on them. For example:
$ cat urls.txt | ./findom-xss.sh
The second argument can be used to specify an output file.
$ ./findom-xss.sh https://domain.tld/about-us.html /path/to/output.txt
By default, output will be stored in the results/
directory in the repository with domain.tld.txt
name.
License
FinDOM-XSS is licensed under the Apache. Take a look at the LICENSE for more information.
Thanks