faizann24 / XssPy

XssPy - Web Application XSS Scanner
http://www.fsecurify.com
MIT License
835 stars 230 forks source link

Just wanted to say, Great program :) #18

Open NovaCygni opened 7 years ago

NovaCygni commented 7 years ago

Just looked over the code, very nicely done, I was actually rewriting the Xss module for my own scanner atm ( v3n0m-scanner also on github ) and was looking around at what the "competition" have been doing... I must say yours is the best example ive seen so far :1st_place_medal: :+1: Would be cool to email sometime and see if we can learn a few tricks from each other :) all the best mate.

NovaCygni commented 7 years ago

PS A couple things I noticed: 1) You could improve the safety of your users by cloning some of the webpages into a cache file using Ayscio/aiohttp, which would mean the XSS checks can be done in the "Isolated" cache itself not the main website, thus the mirror'd website would provide a 'buffer' for some users not wishing to trigger IDS, not useful for all, but useful for some cases. 2) Asyncio, Again, would enable you to speed up your program tenfold, you appear to be bottlenecking alot by the limited speed of Py2.7.

faizann24 commented 7 years ago

Hey NovaCygni,

Nice to know that you liked the program. A lot of this code has been optimized and made better by other developers.

I would really love to make these changes but I'm pretty busy now a days. I hope some one would look at your suggestions and make these changes.

You can email me anytime at faizann288@gmail.com. We can have a chat.

Best Regards Faizan Ahmad

phackt commented 6 years ago

Hello @faizann24 , congrats for your tool, when you say 'A lot of this code has been optimized and made better by other developers', what are you talking about, some forks of your repo, some other tools ?

I'm in the same boat guys.

NovaCygni commented 6 years ago

Well i have a CAFEDEAD Ring0 fail on my laptops GPU so im likely not able to update the code for a couple months so v3n0m scanner is going to be updated.