@@ -65,6 +65,7 @@ $ xspear -u 'https://www.hahwul.com/?q=123' --cookie='role=admin'
6565[ Options ]
6666 -u, --url=target_URL [required] Target Url
6767 -d, --data=POST Body [optional] POST Method Body data
68+ -a, --test-all-params [optional] test to all params(include not reflected)
6869 --headers=HEADERS [optional] Add HTTP Headers
6970 --cookie=COOKIE [optional] Add Cookie
7071 --raw=FILENAME [optional] Load raw file(e.g raw_sample.txt)
@@ -81,7 +82,7 @@ $ xspear -u 'https://www.hahwul.com/?q=123' --cookie='role=admin'
8182 + v=3 : show detail log(req/res)
8283 -h, --help Prints this help
8384 --version Show XSpear version
84- --update Show how to update
85+ --update Show how to update -
8586
8687```
8788### Result types
@@ -117,10 +118,10 @@ $ xspear -u "http://testphp.vulnweb.com/search.php?test=query" -t 30
117118$ xspear -u "http://testphp.vulnweb.com/search.php?test=query&cat=123&ppl=1fhhahwul" -p cat,test
118119```
119120
120- ** testing blind xss** <br >
121+ ** testing blind xss(all params) ** <br >
121122(Should be used as much as possible because Blind XSS is everywhere)<br >
122123```
123- $ xspear -u "http://testphp.vulnweb.com/search.php?test=query" -b "https://hahwul.xss.ht"
124+ $ xspear -u "http://testphp.vulnweb.com/search.php?test=query" -b "https://hahwul.xss.ht" -a
124125
125126# Set your blind xss host. <-b options>
126127```
0 commit comments