# XSSTRON | Electron JS Browser To Find XSS Vulnerabilities Automatically

**URL:** <https://onehack.st/t/xsstron-electron-js-browser-to-find-xss-vulnerabilities-automatically/172623>\
**Category:** Tools & Scripts\
**Tags:** tools, hacking, browsers\
**Created:** [February 13, 2021, 11:20am UTC](https://onehack.st/t/xsstron-electron-js-browser-to-find-xss-vulnerabilities-automatically/172623 "2021-02-13T11:20:51Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![BlueHacker](https://onehack.st/user_avatar/onehack.st/bluehacker/32/174721_2.png) [@BlueHacker](https://onehack.st/u/BlueHacker)\
**Post date:** [February 13, 2021, 11:20am UTC](https://onehack.st/t/xsstron-electron-js-browser-to-find-xss-vulnerabilities-automatically/172623/1 "2021-02-13T11:20:51Z")

</div>

![image](https://onehack.st/uploads/default/original/3X/a/6/a63e7bfebb34f4ce701f3844cd07fa9e62fabd4a.png)

#### XSSTRON, Electron JS Browser To Find XSS Vulnerabilities

#### Powerful Chromium Browser to find XSS Vulnerabilites automatically while browsing web, it can detect many case scenarios with support for POST requests too

### Installation

```auto
Install Node.js and npm (https://www.npmjs.com/get-npm) or (sudo apt install npm)
Download this repo files or (git clone https://github.com/RenwaX23/XSSTRON)
cd XSSTRON
npm install
npm start

```

Some users using Debian/Ubuntu might not able to run the tool as i think it’s an issue with Electron itself, you can continue using the app in Window/OSX and Linux installed on Windows. Check [Known Issues](https://github.com/RenwaX23/XSSTRON#known-issues)

### Usage

**Just browse the web like a normal web browser then it will automatically look for XSS vulns in background and show them in a new window with POC**

[![](https://camo.githubusercontent.com/1f05ac2a8402f4f2e2b17a2fb914b061cf8a516e84352fb8f9412f679eba391b/68747470733a2f2f692e696d6775722e636f6d2f573667757679772e706e67)](https://camo.githubusercontent.com/1f05ac2a8402f4f2e2b17a2fb914b061cf8a516e84352fb8f9412f679eba391b/68747470733a2f2f692e696d6775722e636f6d2f573667757679772e706e67) [![](https://camo.githubusercontent.com/047c4a6054ee54d6784014fc984ffab9b6c806a2128cc56d62a2097b10c37442/68747470733a2f2f692e696d6775722e636f6d2f514e6e7a4330682e706e67)](https://camo.githubusercontent.com/047c4a6054ee54d6784014fc984ffab9b6c806a2128cc56d62a2097b10c37442/68747470733a2f2f692e696d6775722e636f6d2f514e6e7a4330682e706e67)

### GET request POC

[![](https://camo.githubusercontent.com/947a9cc65733c0a62f8378bfe6776fc49557c8af01419d80106fcc6dbcd68260/68747470733a2f2f692e696d6775722e636f6d2f656b4661666d552e706e67)](https://camo.githubusercontent.com/947a9cc65733c0a62f8378bfe6776fc49557c8af01419d80106fcc6dbcd68260/68747470733a2f2f692e696d6775722e636f6d2f656b4661666d552e706e67)

### POST request POC

[![](https://camo.githubusercontent.com/6450b349f1e332df771b933102ab83a73d5b97bcf7d1a927e7e993c87e9a6a3d/68747470733a2f2f7062732e7477696d672e636f6d2f6d656469612f4573614550776958494145645849513f666f726d61743d6a7067266e616d653d6c61726765)](https://camo.githubusercontent.com/6450b349f1e332df771b933102ab83a73d5b97bcf7d1a927e7e993c87e9a6a3d/68747470733a2f2f7062732e7477696d672e636f6d2f6d656469612f4573614550776958494145645849513f666f726d61743d6a7067266e616d653d6c61726765)

### Known issues

Some users in certain linux distributions get into some problems try these

Kali/Debian users this fixes installation:

```auto
sudo apt install npm
sudo npm install -g electron --unsafe-perm=true --allow-root
cd XSSTRON
sudo npm install
electron . --no-sandbox

```

- In (package.json) change it to:

```auto
  "devDependencies": {
    "electron": "^10"
  },

```

- Try to update npm and nodejs to latest version
- delete node\_modules and package-lock.json and reinstall
- in package.json change the electron devDepencies to (electron11-bin)
- install electron using (npm install electron) and run the app with electron using (electron .) with each step remember to delete the node\_modules and package-lock.json and re install again using (npm install)

**Failed to serialize arguments** is known issue and might be fixed soon 🙂

### Thanks for

- [electron-browser](https://github.com/pfrazee/electron-browser)
- [Firing Range](https://public-firing-range.appspot.com/)
- [Brute Logic](https://brutelogic.com.br/knoxss.html)
- [Sapra](https://twitter.com/0xsapra)

## GitHub:

> **[GitHub - RenwaX23/XSSTRON: Electron JS Browser To Find XSS Vulnerabilities...](https://github.com/RenwaX23/XSSTRON)**
>
> Electron JS Browser To Find XSS Vulnerabilities Automatically