Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
Tools/GitHubGitHub/pwn0sec/pwnxss
Web Vulnerability ScannersVulnerability AnalysisWeb SecurityCrawler
GitHubpwn0sec/pwnxss

PwnXSS

PwnXSS: Vulnerability (XSS) scanner exploit

View Repository
8141465 years agoReviewed by Kitploit

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share


A powerful XSS scanner made in python 3.7

Installing

Requirements:

  • BeautifulSoup4
    • root@kitploit:~
    pip install bs4
  • requests
    • root@kitploit:~
    pip install requests
  • python 3.7

    • Commands:
    root@kitploit:~
    git clone https://github.com/pwn0sec/PwnXSS
chmod 755 -R PwnXSS
cd PwnXSS
python3 pwnxss.py --help

    Usage

    Basic usage:

    root@kitploit:~
    python3 pwnxss.py -u http://testphp.vulnweb.com

    Advanced usage:
    root@kitploit:~
    python3 pwnxss.py --help

    Main features

    • crawling all links on a website ( crawler engine )
    • POST and GET forms are supported
    • many settings that can be customized
    • Advanced error handling
    • Multiprocessing support.✔️
    • ETC....

    Screenshot

    Roadmap

    v0.3B:

  • Added custom options ( --proxy, --user-agent etc... )

    • v0.3B Patch:

  • Added support for ( form method GET )

    • v0.4B:

  • Improved Error handling
  • Now Multiple parameters for GET method is Supported

    • v0.5 Release (Final):

    • Bug fixed
    • Now cookies is supported. (--cookie {})

    Note

    • Sorry for my bad english
    • if you run pwnxss on the win10 terminal you will get an untidy output
    • now it doesn't support DOM
    Download Tool