At present, we're only supporting the widely used Google Chrome. XSS Radar takes the form of a browser extension, so we hope to support Firefox in the future. Visit a target page, open the extension and select Fuzz! We've developed contexts – and their respective tests – in a fully modular fashion. By doing so, we've made it easy to contribute new methodologies to Radar's Scanner module. Contexts are found in Tests are found within the We've integrated the following reflected payload classes. These can be found in extension/src/payloads. XSS Radar is a Bug Bounty Forum project with the following contributors. It's community-driven, and we truly appreciate your contributions! Yes, you can add your own payloads in extension/src/payloads. XSS Radar detects reflected XSS. Self-XSS, DOM based XSS and stored XSS cannot be detected with this extension.
A Chrome extension for fast and easy XSS fuzzing
It's also the first tool developed by the Bug Bounty Forum community!git clone https://github.com/bugbountyforum/XSS-Radarchrome://extensions/extension folder
contexts.js (inside extension/src/payloads/). Upon fuzzing, the Scanner searches for applicable contexts on the target and deploys the right payloads. For instance, link-based XSS bugs often rely on injection within the href attribute, so we've added a context which specifically matches against these:{
'type': 'a', // link/anchor type
'matches': ['href'], // URI attribute
'file': 'link.js' // payload file
}
playground subdirectory. The XSS Playground contains a variety of cross-site scripting scenarios designed to support development and ensure Radar's effectiveness. At present, we test for classic vectors, JavaScript injection, tag breakouts, and templating vulnerabilities.