LewisArdern / bXSS

bXSS is a utility which can be used by bug hunters and organizations to identify Blind Cross-Site Scripting.

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

Add Payload Identifiers

LewisArdern opened this issue · comments

commented

Need a way to capture what payload fired on the client, this can probably be done by just giving the element created a class name, with an identifier for the generated payload e.g...

var _ document.createElement('script');
x.className="1"

Then when processing on the server utilize the class name to determine what payload was fired and include that in reporting..

commented

This should also include a burp and zap extension to automatically include on active scans.

commented

This is a lot more trivial than necessary, you can essentially use document.getCurrentScript (which is now working) just need to push the code after finishing the payload improvements