diff --git a/XSS Injection/README.md b/XSS Injection/README.md index 5f3b745..022ad40 100644 --- a/XSS Injection/README.md +++ b/XSS Injection/README.md @@ -126,11 +126,14 @@ More exploits at [http://www.xss-payloads.com/payloads-list.html?a#category=all] ``` ### Tools + +Most tools are also suitable for blind XSS attacks: + * [XSSStrike](https://github.com/s0md3v/XSStrike): Very popular but unfortunately not very well maintained * [xsser](https://github.com/epsylon/xsser): Utilizes a headless browser to detect XSS vulnerabilities * [Dalfox](https://github.com/hahwul/dalfox): Extensive functionality and extremely fast thanks to the implementation in Go * [XSpear](https://github.com/hahwul/XSpear): Similar to Dalfox but based on Ruby -* [domdig](git@github.com:fcavallarin/domdig.git): Headless Chrome XSS Tester +* [domdig](https://github.com/fcavallarin/domdig): Headless Chrome XSS Tester ## XSS in HTML/Applications