Details

Category: Vulnerabilities

Publisher: trickest

Created Date: 9/7/2021

Container: quay.io/trickest/xspear:1.4.1

Source URL: https://github.com/hahwul/XSpear

Parameters

param
string
Command: --param - Test paramters
Command: --cookie - Add Cookie
no-xss
boolean
Command: --no-xss - Don't test XSS, only parameters analysis
headers
string
Command: --headers - Add HTTP Headers
raw-ssl
boolean
Command: --raw-ssl - http/https switch for burp raw file
threads
string
Command: --threads - Threads , default: 10
post-data
string
Command: --data - POST Method Body data
target-url
string
required
Command: --url - Target Url
config-file
file
Command: --config - Use config file
blind-vector
string
Command: -b - Add vector of Blind XSS. With XSS Hunter, ezXSS, HBXSS... e.g: https://hahwul.xss.ht
burp-raw-file
file
Command: --raw - Load raw file(e.g raw_sample.txt)
output-format
string
Command: --output - Output format (cli , json, html)
verbose-level
string
Command: --verbose - Show log depth. 0: quite mode(only result) 1: show scanning status(default) 2: show scanning logs 3: show detail log(req/res)
test-all-params
boolean
Command: --test-all-params - Test to all params(include not reflected)
custom-payload-json-file
file
Command: --custom-payload - Load custom payload json file