vaf icon indicating copy to clipboard operation
vaf copied to clipboard

Published 20 hours ago • verified publisher icon d4rckh

[feature] attribute based XSS

Open jayateertha043 opened this issue 3 years ago • 1 comments

Actually the tool can only detect tag based xss payloads, for detecting attribute based xss, we need to analyse context where they payload is reflected.

May be you can add context analysis if required, to reduce false positives(only for attribute based xss).

This applies only for attribute based xss vulnerability .

jayateertha043 avatar May 10 '21 15:05 jayateertha043

the tool is just a fuzzer, not an xss scanner, maybe a plugin mechanism so you can make your own add-ons and features?

d4rckh avatar May 10 '21 15:05 d4rckh