Automated XSS/HTML Injection Payload Tester using Selenium This project is a simple Python automation tool for testing potential XSS or HTML injection points in web applications.
Features:
- Reads payloads from payload.txt
- Uses Selenium to automatically find and interact with input fields
- Submits payloads and checks if they are reflected in the response
- Prints potential injection findings to the console
Note: This tool is developed for educational and security testing purposes only. Use it responsibly on systems you own or have explicit permission to test.
This project uses payloads from @payloadbox, @ismailtasdelen, and @vsachin168 — thanks for your awesome work!
Big thanks to @yusufdalbudak, @canerhamzaoglu, and @fethiahmetyildirim for their support throughout this project 😁
Installation
- pip install selenium
- pip install webdriver-manager
- python3 injector.py
Usage
- Modify the code and change the target section on line 58. This will be fixed in future updates.