ssl/ezXSS

Feature request: Automatic spider

dicksnel opened this issue · 4 comments

dicksnel commented

Hi, thanks for this great tool!

It would be great if ezXSS can automatically spider an entire app after the XSS is triggered. This works adding a hidden iframe and scanning the target page for all hyperlinks with the same domain. Then for each found URL, fetch it via XHR in the iframe and extract all response data / screenshot it like a usual target page.

The advantage of this is that an attacker can gain immediate insight in all URL's and pages that are available in for example an admin panel.

If this is something to consider including, I have working code available from our own tooling.

ssl commented

Hey Dick,

Thanks for the feature request. This for sure sounds like something we can add. I would love for you to share the working code and possibly some ideas how to implement this in ezXSS.

I can then look myself what would be the best way to implement this in the current system.

dicksnel commented

@ssl great, I'll get back with some example code after my holidays!

  • 👍1
  • ❤️1
ssl commented

Hey @dicksnel! Hope you had a good holiday. Is this FR still something you would like to see in ezXSS? Let me know so I can implement it :)

dicksnel commented

Hi @ssl, I still have it on my list but can't find the time yet. Feel free to close the issue and I'll open a new one later on or a PR when I have things ready!