Skip to content

Latest commit

 

History

History
22 lines (16 loc) · 620 Bytes

README.md

File metadata and controls

22 lines (16 loc) · 620 Bytes
Raw

rexsser

This is a burp plugin (python) that extracts keywords from response using regexes and test for reflected XSS on the target scope. Valid parameters reflected, vulnerable parameters are show in results in the rexsser extension tab.

Regexes

  • extract all javascript 'var' names from response page
  • ...

Screenshots

img

Requirements

  • Jython
  • BurpSuite

Todo

  • Add Multiple regexes to extract words (Example: input elements in the page response)
  • Content-Type filter
  • Scope checkbox
  • Process only given status-codes
  • Turn off/on