search

htrgouvea / spellbook

Framework for rapid development of offensive security tools
https://heitorgouvea.me/
Other
97 stars 22 forks source link

New module to detect XSS #71

Open htrgouvea opened 10 months ago

htrgouvea commented 10 months ago

I believe that a module to identify parameters and possible injection points, along with testing different payloads and checking responses could help find XSS's and this would be very useful for the spellbook

htrgouvea commented 10 months ago

Draft: https://github.com/htrgouvea/spellbook/blob/main/lib/Spellbook/Exploit/Reflected_XSS.pm