xssor2

XSS'OR

XSS'OR - Hack with JavaScript.

ONLINE

You can have a try:

https://xssor.io and http://xssor.io/

It contains three major modules: Encode/Decode, Codz, Probe.

INSTALL

Python 3 with Django 3.0.* or Python 2 with Django 1.11.*

• git clone https://github.com/evilcos/xssor2 or download directly
• cd xssor2
• modify xssor/payload/probe.js

xssor.cmd_url = location.protocol + '//xssor.io/cmd'; // replace xssor.io to your domain or ip address

• pip3/pip install -r requirement.txt
• python3/python manage.py runserver 0.0.0.0:8000

Browser http://[yourip]:8000 to enjoy.

If you want to deploy it with Nginx, you can use uWSGI.

If you want to delete probe automatically, you can use crontab to this script file(xssor/probeclear.py).

Try it by yourself.

DOCKER

You can build this project with docker

docker build -t xssor:latest .

Run the app with

docker run -d -p [port]:8000 xssor:latest [probe domain or ip]

CHANGELOG

…

BE EVIL, DON'T BE BAD.