kxss

This is an adaptation of tomnomnom's kxss tool with a different output format. I didn't want to fork his whole Hacks repository, so I created my own.

All credit for the original code goes to Tomnomnom.

The output format is easier to grep in recon scripts:

URL: https://www.example.com/event_register.php?event=177 Param: event Unfiltered: [" ' < >]

Install the latest released version with Go:

go install github.com/Emoe/kxss@latest

Make sure Go's binary directory is in your PATH. By default this is:

export PATH="$PATH:$(go env GOPATH)/bin"

To build from a local checkout instead:

go install .

Pipe URLs into kxss:

echo "https://www.example.com/event_register.php?event=177" | kxss

If you have a question, you can create an issue or ping me on .