faizann24 / XssPy

XssPy - Web Application XSS Scanner
http://www.fsecurify.com
MIT License
835 stars 218 forks source link

"No link found" for every URL provided #31

Open daaru00 opened 5 years ago

daaru00 commented 5 years ago

Hi,

I trying to use this tool but every type of URL that I pass to -u parameter the response is exaclty the same:

[14:08:55] Doing a short traversal.
[14:08:55] Number of links to test are: 0
[14:08:55] Started finding XSS
[14:08:55]  No link found, exiting

Honestly I can't understand this error.. for example, if I try:

$ xsspy -u https://example.com/

it responds "No link found" but there is a link:

$ curl -s https://example.com/ | grep "<a"

<p><a href="http://www.iana.org/domains/example">More information...</a></p>

what kind of link is this tool searching for?

kikislater commented 5 years ago

It needs payloads and url where payload could be added. Watch here :

https://github.com/pgaijin66/XSS-Payloads

https://github.com/shogunlab/shuriken