👑Find DOM - XSS (CWE-79)

Find DOM Sinks and Source

Scenning-Single-Domain
./findom-xss.sh https://www.dahaboo.com
python3 jodom.py -f parameters.txt -o Check_DOM.txt

Go Further javascript static analysis

LogoOnline JavaScript beautifierbeautifier.io
LogoSemgrepsemgrep.dev
Static Code Analysis
LogoDOMLogger++ – Get this Extension for 🦊 Firefox (en-US)addons.mozilla.org

Search .replace in Source-Code

Search getparam in Source-Code

Request Send to Burp Active Scan to identify data flow

PreviousCloud_MetadataNextFind LFI (CWE-98)

Last updated