├── README.md ├── payloads.txt ├── sql.py ├── sqli.py ├── xfuzz-simple.py ├── xfuzz.py └── xss.py /README.md: -------------------------------------------------------------------------------- 1 | # SQL-XSS 2 | A few SQL and XSS attack tools 3 | ## SQLi.py 4 | Inspired but not based on the popular tool SQLmap, SQLi is a SQL vulnerability checker and a database takeover tool 5 | ## xfuzz.py 6 | xfuzz is a Python script to check for cross-site scripting attacks and what payload is used to cleanly break out of the code. xfuzz takes care of crafting the payload for you by first detecting the location of the parameter reflection, then using a number of tests to determine what payload is needed. 7 | ## xfuzz-simple.py 8 | xfuzz-simple is a simple, more easier and clean way for the pentesters that just want the payload and no extra details. (same as xfuzz, but with less detail) 9 | ## xss.py 10 | Xss.py checks for cross-site scripting attacks in websites and reports it back to you. 11 | ## sql.py 12 | sql.py checks for cross-site scripting attacks in websites and reports it back to you. 13 | -------------------------------------------------------------------------------- /payloads.txt: -------------------------------------------------------------------------------- 1 | 2 | 3 |