This site is the archived OWASP Foundation Wiki and is no longer accepting Account Requests.
To view the new OWASP Foundation website, please visit https://owasp.org
Difference between revisions of "OWASP Xenotix XSS Exploit Framework"
Ajin Abraham (talk | contribs) m |
Ajin Abraham (talk | contribs) |
||
| Line 37: | Line 37: | ||
Ajin Abraham | [https://twitter.com/ajinabraham @ajinabraham] | Ajin Abraham | [https://twitter.com/ajinabraham @ajinabraham] | ||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
== AWARDS == | == AWARDS == | ||
| Line 63: | Line 57: | ||
* [01 Nov 2013] [http://holisticinfosec.blogspot.in/2013/11/toolsmith-owasp-xenotix-xss-exploit.html Toolsmith Tool of the Month] | * [01 Nov 2013] [http://holisticinfosec.blogspot.in/2013/11/toolsmith-owasp-xenotix-xss-exploit.html Toolsmith Tool of the Month] | ||
| + | == RELATED PROJECTS == | ||
| + | |||
| + | * [[OWASP_Xelenium_Project]] | ||
| + | * [[ZAP]] | ||
| + | * [[OWASP_XSSER]] | ||
| + | * [[OWASP_AntiSamy_Project]] | ||
== CLASSIFICATIONS == | == CLASSIFICATIONS == | ||
Revision as of 19:49, 1 February 2014
- Main
- Features
- Conference Talks
- Screenshots
- Downloads
- Documentation
- Roadmap
- Get Involved
- Project About
OWASP Xenotix XSS Exploit Framework 4.5 OWASP Xenotix XSS Exploit Framework is an advanced Cross Site Scripting (XSS) vulnerability detection and exploitation framework. It provides Zero False Positive scan results with its unique Triple Browser Engine (Trident, WebKit, and Gecko) embedded scanner. It is claimed to have the world’s 2nd largest XSS Payloads of about 1500+ distinctive XSS Payloads for effective XSS vulnerability detection and WAF Bypass. It is incorporated with a feature rich Information Gathering module for target Reconnaissance. The Exploit Framework includes highly offensive XSS exploitation modules for Penetration Testing and Proof of Concept creation.
LICENSINGOWASP Xenotix XSS Exploit Framework is free to use. It is licensed under the http://creativecommons.org/licenses/by-sa/3.0/ Creative Commons Attribution-ShareAlike 3.0 license], so you can copy, distribute and transmit the work, and you can adapt it, and use it commercially, but all provided that you attribute the work and if you alter, transform, or build upon this work, you may distribute the resulting work only under the same or similar license to this one.
|
PRESENTATIONSDEFCON DCG Banglore 2013
BlackHat Europe Arsenal 2013
Nulcon Goa 2013
ClubHack 2012
PROJECT LEADERAjin Abraham | @ajinabraham
AWARDS
|
QUICK DOWNLOAD
NEWS AND EVENTS
RELATED PROJECTSCLASSIFICATIONS
| |||||||
SCANNER MODULES
- Manual Mode Scanner
- Auto Mode Scanner
- DOM Scanner
- Multiple Parameter Scanner
- POST Request Scanner
- Header Scanner
- Fuzzer
- Hidden Parameter Detector
INFORMATION GATHERING MODULES
- WAF Fingerprinting
- Victim Fingerprinting
- Browser Fingerprinting
- Browser Features Detector
- Ping Scan
- Port Scan
- Internal Network Scan
EXPLOITATION MODULES
- Send Message
- Cookie Thief
- Phisher
- Tabnabbing
- Keylogger
- HTML5 DDoSer
- Load File
- Executable Drive By
- JavaScript Shell
- Reverse HTTP WebShell
- Drive-By Reverse Shell
- Metasploit Browser Exploit
- Firefox Reverse Shell Addon (Persistent)
- Firefox Session Stealer Addon (Persistent)
- Firefox Keylogger Addon (Persistent)
- Firefox DDoSer Addon (Persistent)
- Firefox Linux Credential File Stealer Addon (Persistent)
- Firefox Download and Execute Addon (Persistent)
UTILITY MODULES
- WebKit Developer Tools
- Payload Encoder
- JavaScript Beautify
- Hash Calculator
- Hash Detector
Nulcon Goa 2013
ClubHack 2013
IMPORTANT
Antivirus Solutions may detect it as a threat. However it is due to the features in the exploitation framework.
Latest Release
- Version 4.5 Mirror 2: DropBox
Older Versions
- Version 4 https://www.dropbox.com/s/ookdse6pyszh736/Xenotix%20XSS%20Exploit%20Framework%20V4.rar
- Version 3 https://www.owasp.org/index.php/File:OWASP_Xenotix_XSS_Exploit_Framework_v3_2013.zip
- Version 2 https://www.owasp.org/index.php/File:Xenotix_XSS_Exploit_Framework_2013_v2.zip
- Version 1 https://www.owasp.org/index.php/File:Xenotix_XSS_Exploitation_Framework.zip
Source
Version 4.5 Videos
OWASP Xenotix XSS Exploit Framework v4.5
Version 4 Videos
Version 3 Videos
Version 2 Videos
V4.5 Changes
- JavaScript Beautifier
- Pause and Resume support for Scan
- Jump to Payload
- Cookie Support for POST Request
- Cookie Support and Custom Headers for Header Scanner
- Added TRACE method Support
- Improved Interface
- Better Proxy Support
- WAF Fingerprinting
- Load Files <exploitation module>
- Hash Calculator
- Hash Detector
Involvement in the development of Xenotix is highly encouraged!
Here are some of the ways you can help:
Support Us
- Facebook Page: Xenotix on Facebook
- Official Page: [Xenotix @ OpenSecurity]
Feedback & Queries
- Do you have any issues with it?
- Do you find any design flows or errors?
- Do you need help in using it?
- Do you have something to tell about it?
Then please use this form: https://docs.google.com/forms/d/1RpUhQvuHGvPTl7Gi-EXzecidGvJwKpsRaY9-MeXm1ro/viewform
Development
Are you a developer? Do you have some cool ideas to contribute? Get in touch via ajin [DOT] abraham [AT] owasp.org If you actively contribute to Xenotix then you will be invited to join the project.
| PROJECT INFO What does this OWASP project offer you? |
RELEASE(S) INFO What releases are available for this project? | |||||||||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
| |||||||||||||||||||||||||||||||||||
