ScanReflectedXSS

This script allows to find XSS vulnerabilities with nuclei, taking advantage of this resource in its maximum analysis capacity.

In the community I have not seen XSS Fuzzing with nuclei in general, only focused on exploitations by CVE

Testing Fuzzing GET

In the first instance they must collect the urls with the GET parameters.

image

cat /home/hernan/test.txt | nuclei -t /home/hernan/Web/Vulnerabilidades/DAST/xss-hernan.yaml

image