search

tomnomnom / hacks

A collection of hacks and one-off scripts
2.14k stars 637 forks source link

installation #14

Open SouhailELHAMDI opened 4 years ago

SouhailELHAMDI commented 4 years ago

please can i know how to install this tools :( i try to clone the main.go and follow steps on last issue , but didn't work

wfinn commented 4 years ago

You need to have golang installed and then run the command tomnomnom listed in the README.md of the program you want to install. For kxss that would be:

go get -u github.com/tomnomnom/hacks/kxss

It might be go.exe on Windows, idk.

Read more about installing go: https://golang.org/doc/install

Since you talk about the last issue, you might just want to cd into the repo and run go build (without the main.go, because there might be more go files).

SouhailELHAMDI commented 4 years ago

thank you so much , can i know how to use this tool ? i read the Readme file , don't get to much :(

wfinn commented 4 years ago

You may want to get a list of urls with tomnomnoms waybackurls, then grep though it for = (to find urls with get parameters like ?x=y) and then just pipe it to kxss. So basically echo yourtargetdwebsite.com | waybackurls | grep = | kxss Then you have a list of urls that might be vulnerable to xss, manually check them and with luck, you have a bug. If you're on Windows, idk. Just play around with his tools for a while and watch the video he made with STÖK.

SouhailELHAMDI commented 4 years ago

thank you so much for your time , really appreciate your help !

Best Regards, Thank you

Banduk1234 commented 1 year ago

We could not install this tool error is showing

Nishantbhagat57 commented 1 year ago

Simple one line installation: go install github.com/tomnomnom/hacks/tok@master go install github.com/tomnomnom/hacks/kxss@master ... ... and so on