Skip to content

Releases: s0md3v/XSStrike

3.1.5

19 Dec 20:49
0ecedc1
Compare
Choose a tag to compare
  • Massive improvements in several aspects

3.1.4

08 Apr 08:26
4032e40
Compare
Choose a tag to compare
  • Negligible DOM XSS false positives
  • x10 Faster crawling by
    • Removing additional request for detecting DOM XSS
    • Skipping testing of a parameter multiple times

3.1.3

08 Apr 08:12
7684889
Compare
Choose a tag to compare
  • Removed browser engine emulation
  • Fixed a few bugs
  • Added a plugin to scan for outdated JS libraries
  • Improved crawling and DOM scanning

3.1.2

30 Dec 23:13
d0c4ea0
Compare
Choose a tag to compare
  • Fixed POST data handling
  • Support for JSON POST data
  • Support for URL rewriting
  • Cleaner crawling dashboard
  • No more weird characters while scanning DOM
  • Better DOM XSS scanning
  • Handle unicode while writing to file
  • Handle connection reset
  • Added ability to add headers from command line
  • Fixed issue which caused foundParams to not be tested

3.1.1

21 Nov 15:08
1c9108f
Compare
Choose a tag to compare
  • Fixed a build breaking typo

3.1.0

21 Nov 14:29
eb50d30
Compare
Choose a tag to compare
  • Various minor enhancements and bug fixes
  • Browser engine integration for zero false positives
  • Coverage of event handler context

3.0.5

17 Nov 18:19
b6d28dd
Compare
Choose a tag to compare
  • Fixed a bug in HTML Parser
  • Ability to add URLs from file
  • More modular structure
  • Show parameter name while bruteforcing
  • Fix payload display while using POST method

3.0.4

15 Nov 20:11
c3385e3
Compare
Choose a tag to compare
  • Fixed a bug in bruteforcer
  • Fixed a major bug in HTML Parser
  • Added progress bar for bruteforcer
  • Code refactor
  • Updated signature for Fortiweb WAF

3.0.3

14 Nov 18:32
4ba2dfe
Compare
Choose a tag to compare
  • Minor bug fixes
  • Proxy Support
  • Blind XSS support
  • Detection of up to 66 WAFs

3.0.2

13 Nov 11:43
7adc5d0
Compare
Choose a tag to compare
  • Ability to bruteforce payloads from a file
  • Verbose output toggle
  • Payload encoding: base64
  • Handle MemoryError in DOM scanner
  • Fixed a bug in bruteforcer