Skip to content

Latest commit

 

History

History
61 lines (39 loc) · 1.96 KB

README.md

File metadata and controls

61 lines (39 loc) · 1.96 KB
Raw

Mass XSS Scanner (MXS)

An advanced XSS scanner that utilizes asynchronous requests to scan a large number of URLs quickly and efficiently.

Features

  • Low CPU usage: Utilizes asynchronous requests to scan, consuming less CPU than traditional scanners.
  • Memory efficient: Efficiently handles large wordlists.
  • Fast: Can scan a large wordlist in a matter of seconds.
  • Low false positives: Employs a polyglot XSS payload to minimize false positives.

Demo Video

Installation

Install the required dependencies:

pip install -r requirements.txt

Usage

Basic usage:

python3 MXS.py -i <input_file> -c <concurrency> -o <output_file> -t <timeout>

Example:

python3 MXS.py -i wordlist.txt -c 1500 -o results.txt -t 15

This will scan the wordlist.txt file with a concurrency of 1500, a timeout of 15 seconds, and save the results to results.txt.

Options

  • -i or --input: Specify the input file containing URLs for scanning.
  • -c or --concurrency: Set the number of concurrent requests to be made.
  • -o or --output: Define the output file for storing the results.
  • -t or --timeout: Set the timeout duration (in seconds) for each request.
  • -p or --payload: Specify a file that contains a custom payload.
  • -x or --hidden: Suppress domain names in the terminal output.
  • -h or --help: Display the help message.

What's Next?

  • Add support for multiple payloads.
  • Improve the concurrency system.

Notes

If you are experiencing issues with concurrency, you can try reducing the number of concurrent requests or increasing the timeout. For example, with a download speed of 300 Mbps, using a concurrency of 1500 and a 15-second timeout typically yields optimal results

Contributing

If you want to contribute to this project, feel free to fork it and submit a pull request. It will be reviewed as soon as possible and merged if it is a good fit for the project.