This site is the archived OWASP Foundation Wiki and is no longer accepting Account Requests.
To view the new OWASP Foundation website, please visit https://owasp.org
Difference between revisions of "OWASP Xenotix XSS Exploit Framework"
Ajin Abraham (talk | contribs) (v6.1 update) |
|||
| Line 54: | Line 54: | ||
== QUICK DOWNLOAD == | == QUICK DOWNLOAD == | ||
| − | [[Image:Dwd.png |200px| link= | + | [[Image:Dwd.png |200px| link=https://drive.google.com/file/d/0B_Ci-1YbMqshNHc3RFRPTzcyM00/view?usp=sharing]] |
== NEWS AND EVENTS == | == NEWS AND EVENTS == | ||
| + | * [19 Mar 2014] Xenotix XSS Exploit Framework V6.2 is Released | ||
* [14 Jan 2015] [http://www.toolswatch.org/2015/01/2014-top-security-tools-as-voted-by-toolswatch-org-readers/ Top 5th Security tool of 2014, voted by ToolsWatch Readers] | * [14 Jan 2015] [http://www.toolswatch.org/2015/01/2014-top-security-tools-as-voted-by-toolswatch-org-readers/ Top 5th Security tool of 2014, voted by ToolsWatch Readers] | ||
| − | |||
* [14 Sept 2014] Xenotix XSS Exploit Framework V6 is Released | * [14 Sept 2014] Xenotix XSS Exploit Framework V6 is Released | ||
* [14 Feb 2014] Xenotix XSS Exploit Framework V5 is Released | * [14 Feb 2014] Xenotix XSS Exploit Framework V5 is Released | ||
| Line 117: | Line 117: | ||
**Fingerprinting | **Fingerprinting | ||
**Features Detector | **Features Detector | ||
| + | ** HSTS+ CSP Visited Sites Grabber | ||
'''EXPLOITATION MODULES''' | '''EXPLOITATION MODULES''' | ||
| Line 207: | Line 208: | ||
====Latest Release==== | ====Latest Release==== | ||
| − | [[Image:Dwd.png | 200px | link= | + | [[Image:Dwd.png | 200px | link=https://drive.google.com/file/d/0B_Ci-1YbMqshNHc3RFRPTzcyM00/view?usp=sharing]] |
| − | + | SHA256: 68096d574aacf51cea46708d473d5c6b13d3b5039c8f3587d2325c9bdefdcbc1 | |
| − | |||
| − | |||
| − | |||
====Requirements==== | ====Requirements==== | ||
* Microsoft .NET Framework 4.5 http://www.microsoft.com/en-in/download/details.aspx?id=30653 | * Microsoft .NET Framework 4.5 http://www.microsoft.com/en-in/download/details.aspx?id=30653 | ||
* IronPython 2.7.3 http://ironpython.codeplex.com/downloads/get/423690 [If you are using Scripting Engine] | * IronPython 2.7.3 http://ironpython.codeplex.com/downloads/get/423690 [If you are using Scripting Engine] | ||
====Older Versions==== | ====Older Versions==== | ||
| + | *Version 6.1 http://opensecurity.in/downloads/OWASP_Xenotix_XSS_Exploit_Framework_V6.1.zip | MD5: 17c703f90dbb4f09b112284232bbb69f | ||
| + | *Version 6.1 Mirror: https://drive.google.com/file/d/0B_Ci-1YbMqshNm5WRlRRTllqcG8/view | MD5: 17c703f90dbb4f09b112284232bbb69f | ||
*Version 6 http://opensecurity.in/downloads/OWASP_Xenotix_XSS_Exploit_Framework_V6.zip | MD5: 54a2335e35c47b1e5a87b163088c63ff | *Version 6 http://opensecurity.in/downloads/OWASP_Xenotix_XSS_Exploit_Framework_V6.zip | MD5: 54a2335e35c47b1e5a87b163088c63ff | ||
*Version 5 http://opensecurity.in/downloads/OWASP_Xenotix_XSS_Exploit_Framework_V5.rar | MD5: bdfce2d4af4012ecc20b86bed876a54a | *Version 5 http://opensecurity.in/downloads/OWASP_Xenotix_XSS_Exploit_Framework_V5.rar | MD5: bdfce2d4af4012ecc20b86bed876a54a | ||
Revision as of 06:43, 19 March 2016
OWASP Xenotix XSS Exploit Framework OWASP Xenotix XSS Exploit Framework is an advanced Cross Site Scripting (XSS) vulnerability detection and exploitation framework. Xenotix provides Zero False Positive XSS Detection by performing the Scan within the browser engines where in real world, payloads get reflected. Xenotix Scanner Module is incorporated with 3 intelligent fuzzers to reduce the scan time and produce better results. If you really don't like the tool logic, then leverage the power of Xenotix API to make the tool work like you wanted it to be. It is claimed to have the world’s 2nd largest XSS Payloads of about 4800+ distinctive XSS Payloads. It is incorporated with a feature rich Information Gathering module for target Reconnaissance. The Exploit Framework includes real world offensive XSS exploitation modules for Penetration Testing and Proof of Concept creation. Say no to alert pop-ups in PoC. Pen testers can now create appealing Proof of Concepts within few clicks.
LICENSINGOWASP Xenotix XSS Exploit Framework is free to use. It is licensed under the http://creativecommons.org/licenses/by-sa/3.0/ Creative Commons Attribution-ShareAlike 3.0 license], so you can copy, distribute and transmit the work, and you can adapt it, and use it commercially, but all provided that you attribute the work and if you alter, transform, or build upon this work, you may distribute the resulting work only under the same or similar license to this one.
|
PRESENTATIONSDEFCON DCG Banglore 2013
BlackHat Europe Arsenal 2013
Nulcon Goa 2013
ClubHack 2012
PROJECT LEADERAjin Abraham | @ajinabraham PROJECT WEBSITEAWARDS
|
QUICK DOWNLOAD
NEWS AND EVENTS
RELATED PROJECTS
CLASSIFICATIONS
| |||||||
