Unlocking the Full Power of xss0r | Recon + Testing for Maximum Impact!

[@wmpdx7]

Keep going on bro ❤

[@ProwlSec]

Thank you, I will

[@shashikiran00]

But when we are giving target 🎯 dnsbruter scanning more than 3 times 4 times it's that tool error

[@ProwlSec]

no that is filteration brother

[@panagiotismitkas5526]

Xss0r tool started automatically after recon completed or did you feed it with the file with the reflected parameters? If yes which command of xss0r did you run? And why you wrote about 400k payloads? Are these payloads yours ?

[@ProwlSec]

everything is automated

[@Raeoh77]

Thank you for always providing valuable information.
I have a question about the video.
Wouldn't scanning this many subdomains result in being blocked by the WAF?
If there is an option to exclude subdomains other than the specified domain from the scan, please share it with us.

[@ProwlSec]

U are correct. U can either use different tools for scanning the subdomains. Don't bang the server with requests. Have some patience and reduce the threads

[@obliteratormegalul6368]

@@ProwlSec reducing threads takes longer, and besides "banging the server with requests" doesnt really have a negative impact when scanning. Thoughts?

[@ProwlSec]

Again if u continue banging a server then u might be rate limited or there can be 500 internal error. So i sad before that make sure u have patience for low threads

[@rishi-tx4sp]

Share the recon tool bro

[@ProwlSec]

It's available for free here: store.xss0r.com