XSSer v.1.8[1] - "The Hive!" released

[psy <epsylon () riseup net>]

Hi FD,

I am glad to present a new release of this tool:

  - https://xsser.03c8.net

---------

"Cross Site "Scripter" (aka XSSer) is an automatic -framework- to
detect, exploit and report XSS vulnerabilities in web-based
applications. It provides several options to try to bypass certain
filters and various special techniques for code injection."

---------

XSSer has pre-installed [ > 1300 XSS ] attacking vectors and can
bypass-exploit code on several browsers/WAFs:

 - [PHPIDS]: PHP-IDS
 - [Imperva]: Imperva Incapsula WAF
 - [WebKnight]: WebKnight WAF
 - [F5]: F5 Big IP WAF
 - [Barracuda]: Barracuda WAF
 - [ModSec]: Mod-Security
 - [QuickDF]: QuickDefense
 - [Chrome]: Google Chrome
 - [IE]: Internet Explorer
 - [FF]: Mozilla's Gecko rendering engine, used by Firefox/Iceweasel
 - [NS-IE]: Netscape in IE rendering engine mode
 - [NS-G]: Netscape in the Gecko rendering engine mode
 - [Opera]: Opera

---------

This release (v1.8.1) called "The Hive!" has added this new features:

 * Re-factorized: Main(), Hashers, Payloaders, Reporters, Exporters...
 * Removed: deprecated features
 * Removed: --no-head (from default)
 * Added: --check-tor, --auto-set, --auto-info and --auto-random
 * Added: new search engines: duck, startpage
 * Added: new dorks (Total: 40)
 * Added: Anti-antiXSS Firewall rules (Firefox, IE, Opera, Chrome)
 * Modified/Updated: DCP (Data Control Protocol) method
 * Modified/Updated: HTTPrs (HTTP Response Splitting) injections
 * Modified/Updated: GTK+
 * Modified/Updated: Crawler/Spidering
 * Updated: "Extra Attacks" (XSA, XSR, COOKIE)
 * Updated: Automatic XSS vectors list (Total: 1326)
 * Updated: XSSer tool updater
 * Updated: Documentation
 * [...]

---------

Media/Contribution:

  - https://xsser.03c8.net/xsser/hive.webm

---------

Code/Packages:

  * [source]:

  - https://code.03c8.net/epsylon/xsser

  * [mirror]:

  - https://github.com/epsylon/xsser

--------

  * [.zip]:

  - https://xsser.03c8.net/xsser/xsser_1.8-1.zip

  * [.tar.gz]:

  - https://xsser.03c8.net/xsser/xsser_1.8-1.tar.gz

-------------------------

Happy "Cross" Hacking! ;-)

Attachment: signature.asc
Description: OpenPGP digital signature

_______________________________________________
Sent through the Full Disclosure mailing list
https://nmap.org/mailman/listinfo/fulldisclosure
Web Archives & RSS: http://seclists.org/fulldisclosure/