0x01Why I make this tool?
I’m working in a electronic commerce company as information security engineer, I need analyse risk in logs from online system. Log’s size is always more than TB. It’s hard to find vulnerability manually. So we develope our tools for scanning work every day.
0x02 What’s “NoXss”?
“NoXss” is a plugin of our Web Scanner named Tiamat, a powerful xss scanner . It’s really faster and suitable for scanning big data. We have used it to find 300+ xss rencently.
- It used only 5 payloads based param’s position to find xss risk rather than fuzzing. Fuzzing is open slowly and blind.
- Phantomjs & Chrome are used in this tool. That means it supports DOM based xss. We can open 4 or more browsers to work together, means faster.
- Analysis. NoXss will create save many files for helping to analyse xss for users because some xss is diffcult to scan,such as Multiparted form request, WAF’s deny, 302 redirect, etc.
- Work with Burpsuite. User can export their traffic data from Burpsuite to **.xml, then scan it. This is really a good function.
- Support some headers like Cookie, Referer, Token or others, this tool will add it automatically. So you don’t worry the logined state or some header’s check in backend.
- NoXss is highly concurrent for using coroutine(Gevent).
0x03 Some result we have found
In fact, NoXss find lots of xss every day. Following are some example:
http://dgwestore.nestlechinese.com/weixin/asset/Show.aspx?openid=abcdef&id=xssjs";alert(1)//
https://m.iwcard.com/wap/Jd?accessToken=xssjs%27%3Balert(1);//
https://m.youyuwang.com/goods/668.html?days=xssjs%27%3Balert(1);//
https://36.vrm.cn/40?src=ta-ff-xmxx-01-FF_75_806&name=%E6%BD%98%E5%BB%B7%E5%BC%BA&mobile=18023786181&yinliuActivityId=806&sex=1&yinliuUserId=6756091&birthday=1974-07-07&yinliu_company_id=xssjs%27%3Balert(1);//
0x04 Our Plan
We decide to open this plugin at https://github.com/lwzSoviet/NoXss firstly. The whole scanner “Tiamat” need more better plugins like command injection, ssrf, etc. We will open it in a few time.
Using “NoXss” and give me some advice or issues if you have interest in it.
Don’t forget to Star it if it’s helpful to you