HackTalk

XSS Helper

XSS Helper is a tool coded by Luis Santana of the HackTalk Security team which aids in the rapid development of XSS attack strings.

XSS Helper was created after I became more and more tired of generating XSS injectable strings. Besides being able to create simple iframe injections, XSS Helper is able to Hex Encode, Charcode Encode and “Randomly” Hex Encode your attack strings. There is also a function which allows you to shorten your url with the popular is.gd url shortener.

Showing off some features

The text http://hacktalk.net was input into the text bar and I used every function (except clear) on that text. As you can see the sheer ability to generate many different types of encoded XSS attack strings in an easy to use interface can save you lots of time and typing.

If you like this tool, it is available for download at http://hacktalk.net/files/XSSHelper.exe

Article By

has written 728 articles!

Subscribe to the HackTalk Security feed via RSS or EMAIL to receive instant updates.