PwnXSS is a Python-based XSS (Cross-Site Scripting) scanner used to find potential XSS vulnerabilities in web applications. It supports GET and POST requests, website crawling, custom payloads, and different scan options. You can easily install and use PwnXSS in Termux with a few simple commands. Use it only on websites you own or have permission to test.
Features of the PwnXSS Tool:
- Scan websites for XSS vulnerabilities.
- Crawl web pages automatically.
- Test GET and POST requests.
- Use custom XSS payloads.
- Set custom cookies and user agents.
- Configure proxy settings.
Installation Commands
Follow the commands below to install PwnXSS in Termux. Run them one by one to complete the installation successfully.
Update Termux packages.
pkg update && pkg upgrade -y
Install Git and Python.
pkg install git python -y
Clone the PwnXSS repository.
git clone https://github.com/pwn0sec/PwnXSS
Move into the project directory.
cd PwnXSS
Install the required Python packages.
pip install -r requirements.txt
Run PwnXSS.
python3 pwnxss.py --help
PwnXSS is now installed and ready to use.
Usage Commands
After installing PwnXSS, you can use different commands to scan authorized websites, customize scan settings, and view tool information.
Display the help menu.
python3 pwnxss.py --help
Scan a target URL.
python3 pwnxss.py -u http://example.com
Set the crawl depth.
python3 pwnxss.py -u http://example.com --depth 3
Set the payload level.
python3 pwnxss.py -u http://example.com --payload-level 6
Use a custom payload.
python3 pwnxss.py -u http://example.com --payload "<script>alert(1)</script>"
Scan using the GET method.
python3 pwnxss.py -u http://example.com --method 0
Scan using the POST method.
python3 pwnxss.py -u http://example.com --method 1
Run a single-page scan without crawling.
python3 pwnxss.py -u http://example.com --single
Use a custom User-Agent.
python3 pwnxss.py -u http://example.com --user-agent "Mozilla/5.0"
Display information about PwnXSS.
python3 pwnxss.py --about
Run the required command with your target URL, and PwnXSS will begin the selected scan and show the results in the terminal.
Overview
PwnXSS is a simple and useful XSS scanning tool for Termux that helps you learn how Cross-Site Scripting vulnerabilities are tested. It is easy to install, beginner-friendly, and suitable for educational purposes and authorized security testing.
