Skip to main content

Automate XSS workflows with waybackurls, gau, gf, and dalfox.

Project description

QuickXSS

Automate XSS discovery by chaining waybackurls, gau, gf, and dalfox.

CI PyPI Python 3.12+ License: MIT

Quick Start

pip install quickxss
quickxss setup --install      # Auto-install gf, dalfox, waybackurls, gau
quickxss scan -d testphp.vulnweb.com

Installation

pip install quickxss

Or with pipx:

pipx install quickxss

Usage

quickxss scan -d testphp.vulnweb.com                    # Basic scan
quickxss scan -d testphp.vulnweb.com -b blind.xss.ht    # With blind XSS callback
quickxss scan -d testphp.vulnweb.com -o results.txt     # Custom output name
quickxss setup                                          # Check dependencies
quickxss setup --install                                # Auto-install missing deps

Docker

docker build -t quickxss .
docker run --rm -it quickxss scan -d testphp.vulnweb.com

Output

Results saved to results/<domain>/:

File Description
<domain>.txt Raw URL collection
<domain>_xss.txt Candidate URLs for testing
results.txt Dalfox findings

Development

pytest                                    # Run tests
QUICKXSS_INTEGRATION=1 pytest -m integration  # Integration tests
make isort                                # Sort imports
make lint                                 # Run linter

License

MIT

Project details


Download files

Download the file for your platform. If you're not sure which to choose, learn more about installing packages.

Source Distribution

quickxss-3.0.1.tar.gz (15.4 kB view details)

Uploaded Source

Built Distribution

If you're not sure about the file name format, learn more about wheel file names.

quickxss-3.0.1-py3-none-any.whl (20.4 kB view details)

Uploaded Python 3

File details

Details for the file quickxss-3.0.1.tar.gz.

File metadata

  • Download URL: quickxss-3.0.1.tar.gz
  • Upload date:
  • Size: 15.4 kB
  • Tags: Source
  • Uploaded using Trusted Publishing? Yes
  • Uploaded via: twine/6.1.0 CPython/3.13.7

File hashes

Hashes for quickxss-3.0.1.tar.gz
Algorithm Hash digest
SHA256 61834caaec47a8314dc37ab250c53d7df7ea8e1d12e2b2f3fd049f33b43935bf
MD5 68798ef0ba43ef14d27ec7347258a9d8
BLAKE2b-256 6671c3b92a15cb901f5f59b6c4d43858467d432eaafd8bcdcd1cab0d891d7f6a

See more details on using hashes here.

Provenance

The following attestation bundles were made for quickxss-3.0.1.tar.gz:

Publisher: release.yml on theinfosecguy/QuickXSS

Attestations: Values shown here reflect the state when the release was signed and may no longer be current.

File details

Details for the file quickxss-3.0.1-py3-none-any.whl.

File metadata

  • Download URL: quickxss-3.0.1-py3-none-any.whl
  • Upload date:
  • Size: 20.4 kB
  • Tags: Python 3
  • Uploaded using Trusted Publishing? Yes
  • Uploaded via: twine/6.1.0 CPython/3.13.7

File hashes

Hashes for quickxss-3.0.1-py3-none-any.whl
Algorithm Hash digest
SHA256 51c27d4a5b73a7176b09bcd3afb0c908814cd8474799c7a22d62d1f54814cf64
MD5 bae0cab870b53c09e3ccc6a5134f59b1
BLAKE2b-256 54fa4875310ef41745ea0a4a299f8b9435623746b3d725f92c1a12d3415030ec

See more details on using hashes here.

Provenance

The following attestation bundles were made for quickxss-3.0.1-py3-none-any.whl:

Publisher: release.yml on theinfosecguy/QuickXSS

Attestations: Values shown here reflect the state when the release was signed and may no longer be current.

Supported by

AWS Cloud computing and Security Sponsor Datadog Monitoring Depot Continuous Integration Fastly CDN Google Download Analytics Pingdom Monitoring Sentry Error logging StatusPage Status page