cwence

@s0md3v : Thank you ! But I tried your method, the mistake still exists..... Please try to execute the following command in win10, check the execution results, you will see...

Under the window there are bugs .. python3 xsstrike.py -u "https://www.baidu.com" --data '{"userId":"Pw2bY","pageSize":9999,"pageNum":1}' --headers 'Cookie: zmname' --params --blind --fuzzer ERROR: xsstrike.py: error: unrecognized arguments: zmname'

Using double quotes is fail ! dict is fail ! The XSStrike version is 3.1.2  The feeling So ...... Please sample the correct usage on win10 system