Web Application Security

FinDOM-XSS – DOM Based XSS Vulnerability Scanner With Simplicity

FinDOM-XSS - A Fast DOM Based XSS Vulnerability Scanner With Simplicity


FinDOM-XSS is a tool that allows you to finding for possible and/ potential DOM based XSS vulnerability in a fast manner.


$ git clone https://github.com/dwisiswant0/findom-xss.git

Dependencies: LinkFinder

Change the value of LINKFINDER variable (on line 3) with your main LinkFinder file.

To run the tool on a target, just use the following command.

$ ./findom-xss.sh https://target.host/about-us.html

This will run the tool against target.host. Or if you have a list of targets you want to scan.

$ cat urls.txt | xargs -I % ./findom-xss.sh %

The second argument can be used to specify an output file.

$ ./findom-xss.sh https://target.host/about-us.html /path/to/output.txt

By default, output will be stored in the results/ directory in the repository with target.host.txt name.


  • @dark_warlord14 – Inspired by the JSScanner tool, that’s why this tool was made.
  • @aslanewre – With possible patterns.

About the author

Mazen Elzanaty

Add Comment

Click here to post a comment

Leave a Reply

This site uses Akismet to reduce spam. Learn how your comment data is processed.

%d bloggers like this: