Testing XSS Tools On Target Protected By WAF | 2024

[@BePracticalTech]

For those who are saying this video is sponsored, Let me tell you all that it is not. It is just that i liked the tool and thought to share it with you all. Whether you are planning to buy it or not is completely up to you. Thanks

[@aatankbadboy3941]

@@BePracticalTech it's okay but mention that this is sponsored... not only you are promoting it there are lots of other creators also...

[@BePracticalTech]

This video is not sponsored by anyone nor I got paid to promote any of the tools. I even said in the video that if you don't want to buy the tool then it is completely fine..

[@c_war]

This is overhyped tool

[@kittoh_]

Not sponsored but you have a discount code. 😅

[@ishoeb0x1]

Hello., Tested the same target endpoint in Knoxss. This tool was also able to found xss

[@yesireact]

U r saying knoxss not able to find ?

[@aatankbadboy3941]

Love you bro I want ibrahim xss

[@PrashantSingh-jg3jd]

So I assume this is how the ibrahimxss tool works: The tool requires binding with google chrome where the tool tracks for any kind of popups in real time within the browser may be possible with that specific chrome driver. The tool then use payload file to send the request by appending the payload with in the browser. If any pop ups comes then, the tool picks a screenshot and include that url in the final generated report. This may be the reason why ibrahimxss got false positive as seen in your video. It simply tracks the popups in real time against the list of payloads. I am be wrong though! Let me know if anyone else think the other way. cheers!

[@BePracticalTech]

You are right!

[@SevenHeavenlyig]

Bro made a promotional video without saying it's Sponsored by Ibrahimxss 😂😂

[@abdulx01]

😂

[@swapnilade2612]

Why not you doing ibrahim xss vs knoxss?

[@syeddaniyal1273]

because it is a promotion of ibrahimXSS

[@darkmix4192]

How is this knoxss tool work and it give positive results?

[@abdulx01]

I have same... Tool that exactly work like ibrahimxss but different is payload file.. If you have good payload list then..good. Same headless detection tool. No false posstie. And it's cost nothing free of cost. Thanks

[@krrishogx]

name?

[@ahmed_bembo]

Can you share with us

[@couragelotsu8153]

Can you share it pls?😢

[@couragelotsu8153]

Can you share it pls?😢

[@ZeroOne-wooh]

sponsored or not, im just disappointed by the fact that despite knowing the truth, you didn't let your audience know whats going on. its not the tool, its just the list of the payloads which any tool could use it and find same shit. Dalfox can do it if you pass those payloads. sponsoring is not bad, trying to cheat is. just be careful. you've worked hard to build your legacy. don't let cheap tricks get you or don't try to do cheap tricks on new bug bounty hunters. cuz sooner or later you will be called out. hope you don't repeat this in the future. and good luck

[@yeahboy2389]

Literally bro, I was also thinking the same. But, I believe that only script kiddies would fall for this.

[@pawankandu914]

Sir if u can then please give us that payoad lists used by the paid tool in this video.....

[@SuzuneMyQueen]

many payload are available on public github repo such as coffinxp's github (in the payloads repo)

[@Gladiator-zh9od]

Brother make video on how to configure Firefox for burp on windows

[@eyezikandexploits]

could you post the payload list of the last tool? you have github?

[@sarans119]

Bro it is asking API but I not received it

[@earningoffers1]

I have api key

[@Heeraheera-ox8gm]

​@@earningoffers1 bro api key

[@DheerajMadhukar]

Which UI tool you are using to manage VPS(s) ?

[@BePracticalTech]

@@DheerajMadhukar termius

[@gg-mr4qr]

can if you share the payload file that is very very helpful for us.

[@rushangshah6308]

Why not knoxss

[@aatankbadboy3941]

Mention that this is sponsored 🎉

[@songsxmashup]

some people are getting tool free at all by doing this and that

[@nishantrmagar517]

is this tool also run in mac ?

[@Prince-zu5uj]

Akamai waf bypass?

[@uttarkhandcooltech1237]

Hello bhaiya windows theme bto apka jo h

[@mrwaahmed9897]

lol i tested it and it's not bypass any wafs and u didn't try knoxss because it's the best

[@ferryirawan1575]

API KEY

[@SecureByBhavesh]

First !!!

[@monKeman495]

dalfox can't even find a single shit , what a shame god knows what they r doing !

[@eyezikandexploits]

that second payload in dalfox triggered if you would have checked the dom

[@exploreThe_]

Its only the game of payload... not tool...

[@taralnawal5333]

Bro only give this payload.txt file😂

[@l00pzwastaken]

Use tag as sponsored. Let me tell you why the tool owner is giving everyone to promote his tool i have seen many tweets which are bullshit

[@Ironhide234]

First 😂

[@vijayanarasimhamarella]

Don't trust him it's a promotion of his channel and users. He is playing cheap tricks.

[@WebWonders1]

Faking 😅

[@tushargurav3987]

Disappointed :[

[@rootxgod1086]

promotion

[@4Re5_Xm]

Disappointed

[@d3crypt_m3]

Why paid promotion 🥲