Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
XSSTRON — Electron JS Browser To Find XSS Vulnerabilities Automatically | Kitploit
Tools/GitHubGitHub/renwax23/xsstron
Vulnerability ScannersWeb Vulnerability ScannersWeb SecurityPenetration Testing
GitHubrenwax23/xsstron

XSSTRON

Electron JS Browser To Find XSS Vulnerabilities Automatically

View Repository
7461205 years agoReviewed by Kitploit

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share



XSSTRON, Electron JS Browser To Find XSS Vulnerabilities


Powerful Chromium Browser to find XSS Vulnerabilites automatically while browsing web, it can detect many case scenarios with support for POST requests too

Installation

root@kitploit:~
Install Node.js and npm (https://www.npmjs.com/get-npm) or (sudo apt install npm)
Download this repo files or (git clone https://github.com/RenwaX23/XSSTRON)
cd XSSTRON
npm install
npm start

Some users using Debian/Ubuntu might not able to run the tool as i think it's an issue with Electron itself, you can continue using the app in Window/OSX and Linux installed on Windows. Check Known Issues

Download Tool

Usage

Just browse the web like a normal web browser then it will automatically look for XSS vulns in background and show them in a new window with POC

GET request POC

POST request POC

Known issues

Some users in certain linux distributions get into some problems try these

Kali/Debian users this fixes installation:

root@kitploit:~
sudo apt install npm
sudo npm install -g electron --unsafe-perm=true --allow-root
cd XSSTRON
sudo npm install
electron . --no-sandbox
  • In (package.json) change it to:
root@kitploit:~
  "devDependencies": {
    "electron": "^10"
  },
  • Try to update npm and nodejs to latest version
  • delete node_modules and package-lock.json and reinstall
  • in package.json change the electron devDepencies to (electron11-bin)
  • install electron using (npm install electron) and run the app with electron using (electron .) with each step remember to delete the node_modules and package-lock.json and re install again using (npm install)

Failed to serialize arguments is known issue and might be fixed soon :)

Thanks for

  • electron-browser
  • Firing Range
  • Brute Logic
  • Sapra