# FinDOM-XSS | A Fast DOM Based XSS Vulnerability Scanner With Simplicity

**URL:** <https://onehack.st/t/findom-xss-a-fast-dom-based-xss-vulnerability-scanner-with-simplicity/96093>\
**Category:** Tools & Scripts\
**Tags:** hacking, documents\
**Created:** [July 12, 2020, 11:59am UTC](https://onehack.st/t/findom-xss-a-fast-dom-based-xss-vulnerability-scanner-with-simplicity/96093 "2020-07-12T11:59:10Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![BlueHacker](https://onehack.st/user_avatar/onehack.st/bluehacker/32/174721_2.png) [@BlueHacker](https://onehack.st/u/BlueHacker)\
**Post date:** [July 12, 2020, 11:59am UTC](https://onehack.st/t/findom-xss-a-fast-dom-based-xss-vulnerability-scanner-with-simplicity/96093/1 "2020-07-12T11:59:11Z")

</div>

![image](https://onehack.st/uploads/default/original/3X/8/4/84de4faaf2c529688534fb71eda9558555722816.png)

FinDOM-XSS is a tool that allows you to finding for possible and/ potential DOM based XSS vulnerability in a fast manner.

**Installation**

```auto
$ git clone https://github.com/dwisiswant0/findom-xss.git

```

**Dependencies:** [LinkFinder](https://github.com/GerbenJavado/LinkFinder)

**Configuration**  
Change the value of `LINKFINDER` variable _[(on line 3)](https://github.com/dwisiswant0/findom-xss/blob/master/findom-xss.sh#L3)_ with your main LinkFinder file.

**Usage**  
To run the tool on a target, just use the following command.

```auto
$ ./findom-xss.sh https://target.host/about-us.html

```

This will run the tool against `target.host` . Or if you have a list of targets you want to scan.

```auto
$ cat urls.txt | xargs -I % ./findom-xss.sh %

```

The second argument can be used to specify an output file.

```auto
$ ./findom-xss.sh https://target.host/about-us.html /path/to/output.txt

```

By default, output will be stored in the `results/` directory in the repository with `target.host.txt` name.

**Thanks**

- [@dark\_warlord14](https://twitter.com/dark_warlord14) – Inspired by the JSScanner tool, that’s why this tool was made.
- [@aslanewre](https://twitter.com/aslanewre) – With possible patterns.

## GitHub:

> **[GitHub - dwisiswant0/findom-xss: A fast DOM based XSS vulnerability scanner with...](https://github.com/dwisiswant0/findom-xss)**
>
> A fast DOM based XSS vulnerability scanner with simplicity.