Testing XSS Tools On Target Protected By WAF | 2024

[@BePracticalTech]

For those who are saying this video is sponsored, Let me tell you all that it is not. It is just that i liked the tool and thought to share it with you all. Whether you are planning to buy it or not is completely up to you. Thanks

[@aatankbadboy3941]

@@BePracticalTech it's okay but mention that this is sponsored... not only you are promoting it there are lots of other creators also...

[@BePracticalTech]

This video is not sponsored by anyone nor I got paid to promote any of the tools. I even said in the video that if you don't want to buy the tool then it is completely fine..

[@c_war]

This is overhyped tool

[@kittoh_]

Not sponsored but you have a discount code. 😅

[@ZeroOne-wooh]

sponsored or not, im just disappointed by the fact that despite knowing the truth, you didn't let your audience know whats going on. its not the tool, its just the list of the payloads which any tool could use it and find same shit. Dalfox can do it if you pass those payloads. sponsoring is not bad, trying to cheat is. just be careful. you've worked hard to build your legacy. don't let cheap tricks get you or don't try to do cheap tricks on new bug bounty hunters. cuz sooner or later you will be called out. hope you don't repeat this in the future. and good luck

[@yeahboy2389]

Literally bro, I was also thinking the same. But, I believe that only script kiddies would fall for this.

[@janekmachnicki2593]

Start making your own tools not just copy and paste !!

[@aatankbadboy3941]

Love you bro I want ibrahim xss

[@janekmachnicki2593]

Thanks mate !!

[@ishoeb0x1]

Hello., Tested the same target endpoint in Knoxss. This tool was also able to found xss

[@HackChey]

U r saying knoxss not able to find ?

[@PrashantSingh-jg3jd]

So I assume this is how the ibrahimxss tool works: The tool requires binding with google chrome where the tool tracks for any kind of popups in real time within the browser may be possible with that specific chrome driver. The tool then use payload file to send the request by appending the payload with in the browser. If any pop ups comes then, the tool picks a screenshot and include that url in the final generated report. This may be the reason why ibrahimxss got false positive as seen in your video. It simply tracks the popups in real time against the list of payloads. I am be wrong though! Let me know if anyone else think the other way. cheers!

[@BePracticalTech]

You are right!

[@SevenHeavenlyig]

Bro made a promotional video without saying it's Sponsored by Ibrahimxss 😂😂

[@abdulx01]

😂

[@abdulx01]

I have same... Tool that exactly work like ibrahimxss but different is payload file.. If you have good payload list then..good. Same headless detection tool. No false posstie. And it's cost nothing free of cost. Thanks

[@krrishogx]

name?

[@ahmed_bembo]

Can you share with us

[@couragelotsu8153]

Can you share it pls?😢

[@couragelotsu8153]

Can you share it pls?😢

[@swapnilade2612]

Why not you doing ibrahim xss vs knoxss?

[@syeddaniyal1273]

because it is a promotion of ibrahimXSS

[@darkmix4192]

How is this knoxss tool work and it give positive results?

[@MiniExplore_Vlogs]

yes they all are paid actors

[@rushangshah6308]

Why not knoxss

[@csstestusr]

Akamai waf bypass?

[@sarans119]

Bro it is asking API but I not received it

[@earningoffers1]

I have api key

[@Heeraheera-ox8gm]

​@@earningoffers1 bro api key

[@pawankandu914]

Sir if u can then please give us that payoad lists used by the paid tool in this video.....

[@SuzuneMyQueen]

many payload are available on public github repo such as coffinxp's github (in the payloads repo)

[@eyezikandexploits]

could you post the payload list of the last tool? you have github?

[@aatankbadboy3941]

Mention that this is sponsored 🎉

[@creative_man-n3f]

some people are getting tool free at all by doing this and that

[@smallking-l7x]

good video tho

[@DheerajMadhukar]

Which UI tool you are using to manage VPS(s) ?

[@BePracticalTech]

@@DheerajMadhukar termius

[@gg-mr4qr]

can if you share the payload file that is very very helpful for us.

[@Gladiator-zh9od]

Brother make video on how to configure Firefox for burp on windows

[@nishantrmagar517]

is this tool also run in mac ?

[@monKeman495]

dalfox can't even find a single shit , what a shame god knows what they r doing !

[@eyezikandexploits]

that second payload in dalfox triggered if you would have checked the dom

[@smallking-l7x]

this video is sponsored it is very clear . but if u have mentioned it on the video it will not have cause this dissapointment. i dont mean any insults

[@uttarkhandcooltech1237]

Hello bhaiya windows theme bto apka jo h

[@SecureByBhavesh]

First !!!

[@mrwaahmed9897]

lol i tested it and it's not bypass any wafs and u didn't try knoxss because it's the best

[@l00pzwastaken]

Use tag as sponsored. Let me tell you why the tool owner is giving everyone to promote his tool i have seen many tweets which are bullshit

[@exploreThe_]

Its only the game of payload... not tool...

[@world-b4f]

API KEY

[@MiniExplore_Vlogs]

Ibrahim XSS is scammer they all are paid

[@MiniExplore_Vlogs]

Don't use Ibrahim xss tools

[@vijayanarasimhamarella]

Don't trust him it's a promotion of his channel and users. He is playing cheap tricks.

[@taralnawal5333]

Bro only give this payload.txt file😂

[@WebWonders1]

Faking 😅

[@tushargurav3987]

Disappointed :[

[@SneakedUppp]

Xss tools suck lol manual is best way to do it if you actually want to find something besides false positives

[@Ironhide234]

First 😂

[@rootxgod1086]

promotion

[@d3crypt_m3]

Why paid promotion 🥲

[@4Re5_Xm]

Disappointed