Automated reconnaissance and XSS detection framework integrating subfinder, httpx, katana, gospider, waybackurls, and dalfox into a 9-stage pipeline for web security auditing and bug bounty hunting.
GETROBARB XSS Scanner is an automated framework for reconnaissance and detection of XSS (Cross-Site Scripting) vulnerabilities written in Bash, designed for authorized web security audits. It integrates several popular utilities from the bug bounty and pentesting ecosystem to automate the entire vulnerable endpoint discovery flow.
Tool description: GETROBARB XSS Scanner
GETROBARB XSS Scanner Framework is an automated reconnaissance and XSS scanning tool that combines multiple offensive security utilities to identify potential Cross-Site Scripting (XSS) vulnerabilities in web applications.
The framework is aimed at pentesters, security researchers, and bug bounty hunters, allowing you to run a complete workflow of subdomain discovery, URL collection, parameter extraction, and XSS scanning from a single interface.
It was developed in Bash by AnonSec777 for the Hacking Team.
Tool objective
The main objective of the framework is:
Automate the web reconnaissance process
Discover active subdomains
Collect URLs from multiple sources
Identify potentially vulnerable parameters
Execute automatic XSS scanning
All of this is executed through a structured 9-stage pipeline.
Integrated tools
The framework uses several widely used security tools:
subfinder → subdomain enumeration
httpx → active host verification
katana → web application crawling
gospider → advanced URL collection
waybackurls → historical URL extraction from Wayback Machine
urless → parameter cleaning and normalization
dalfox → advanced XSS vulnerability scanner
dnsx → DNS resolution (domain verification)
These tools are integrated into an automated workflow.
Operation flow (Workflow)
The complete scan runs in 9 stages:
1️⃣ Subdomain enumeration
Uses subfinder to discover subdomains associated with the target domain.
Output:
subs.txt
2️⃣ Active host verification
Uses httpx to check which subdomains respond.
Output:
alive.txt
3️⃣ Application crawling
Uses katana to discover internal endpoints and website routes.
Output:
katana.txt
4️⃣ Additional spidering
Uses gospider to collect more URLs through crawling.
Output:
gospider.txt
5️⃣ Historical URL extraction
Gets endpoints from Wayback Machine using waybackurls.
Output:
wayback.txt
6️⃣ URL merging
Combines all collected URLs into a single file, removing duplicates.
Output:
all_urls.txt
7️⃣ Parameter extraction
Filters URLs containing parameters (=), as they are often vectors for XSS.
Output:
params.txt
8️⃣ Parameter cleaning
Uses urless to normalize parameters and remove duplicates.
Output:
clean_params.txt
9️⃣ XSS scanning
Runs dalfox to detect possible XSS vulnerabilities in the found parameters.
Output:
xss_findings.txt
Main features
✔ Automated web reconnaissance framework ✔ Complete pipeline for XSS detection ✔ Integration with modern pentesting tools ✔ Modular scanning (can be run by phases) ✔ Full scan with a single command ✔ Verification of installed tools ✔ Ethical warning before execution ✔ Organized output files
Usage
Run full workflow:
./getrobarb.sh all ejemplo.com
Run only a module:
./getrobarb.sh subfinder ejemplo.com
Scan XSS from parameter list:
./getrobarb.sh dalfox clean_params.txt
Generated results
File Content subs.txt found subdomains alive.txt active hosts katana.txt discovered URLs gospider.txt additional URLs wayback.txt historical URLs all_urls.txt all URLs params.txt URLs with parameters clean_params.txt normalized parameters xss_findings.txt possible XSS vulnerabilities
Use cases
The tool can be used in:
Authorized web pentesting
Bug Bounty programs
CTF and security labs
Web security audits
Advanced web application reconnaissance
Ethical warning
The script itself includes an ethical verification that reminds you that the tool should only be used on:
Systems with authorization
Legal pentesting
Security labs
✅ In summary:
GETROBARB XSS Scanner is an automated web reconnaissance and XSS detection framework that integrates several popular pentesting tools to run a complete vulnerability discovery workflow quickly and structured.
Telegram
https://t.me/PlantillasNucleiHackingTeam https://t.me/HackingTeamGrupoOfficial https://t.me/+0hHSaKO7eI9mNWY8 Hacking Team Difusion https://t.me/+llcmNGzz6JIyMmI0 Biblioteca https://t.me/TermuxHackingTeam
X
@HackingTeam777
Bluesky
https://bsky.app/profile/hackingteam.bsky.social
DiscordTelegram
https://t.me/PlantillasNucleiHackingTeam https://t.me/HackingTeamGrupoOfficial https://t.me/+0hHSaKO7eI9mNWY8 Hacking Team Difusion https://t.me/+llcmNGzz6JIyMmI0 Biblioteca https://t.me/TermuxHackingTeam
X
@HackingTeam77
Bluesky
https://bsky.app/profile/hackingteam.bsky.social
Discord
https://www.facebook.com/groups/hackingteam2022/?ref=share https://www.facebook.com/groups/HackingTeamCyber/?ref=share
Youtube
https://www.youtube.com/@HackingTeamOfficial
TikTok channel
https://www.tiktok.com/@hacking.kdea?_t=ZS-8vTtlaQrDTL&_r=1
#hackingteam #cibersecurity #infosec #eticalhacking #pentesting #dns #script #cracking #hack #security #bugbounty #payload #tools #exploit #cors #sqli #ssrf #python #c2 #poc #web #ramsomware #phishing #linux #osint #linux #windows #redteam #blueteam #spyware #digitalforensics #reverseengineeringtools #rat #malwareforensics #exploitdevelopment #sandboxing #apt #zerodayexploit #xss #github #cve #java #tools #termux #troyano #dev #sqlmap #waybackurls #copilot #ai #ia #kalilinux #parrot #dracos #susse #nessus #oswazap #burpsuite #wireguar
