Burp suit中 Xssvalidate使用介绍-推荐（XSS自动扫描）

偏执的太偏执、 2022-05-27 09:43 151阅读 0赞

#### 转载地址：http://www.mmfei.com/?p=444 ####

[https://portswigger.net/burp/releases/download?product=free&version=1.7.27&type=macosx][https_portswigger.net_burp_releases_download_product_free_version_1.7.27_type_macosx]

[https://bitbucket.org/ariya/phantomjs/downloads/phantomjs-2.1.1-macosx.zip][https_bitbucket.org_ariya_phantomjs_downloads_phantomjs-2.1.1-macosx.zip]

<table style="font-size:12px;font-style:inherit;font-weight:inherit;margin-left:0px;vertical-align:baseline;border:none;margin-top:0px;margin-right:0px;margin-bottom:0px;padding:0px;border-spacing:0px;width:auto;table-layout:auto;background:none;"> 
 <tbody style="font-style:inherit;font-weight:inherit;margin:0px;padding:0px;vertical-align:baseline;"> 
 <tr style="font-style:inherit;font-weight:inherit;border-style:none;margin:0px;padding:0px;vertical-align:top;background:0px 50%;"> 
 <td style="border-width:0px;font-size:12px;font-style:inherit;border-right-color:rgb(223,132,132);margin:0px;padding:0px;vertical-align:top;color:rgb(203,203,203);"> 
 <div style="border:0px;font-style:inherit;font-weight:inherit;margin:0px;padding:0px;vertical-align:baseline;white-space:nowrap;line-height:15px;background:0px 50%;"> 
 <div style="border:0px;font-style:inherit;margin:0px;padding:0px 5px;vertical-align:baseline;text-align:center;height:15px;background:0px 50%;"> 
 1 
 </div> 
 <div style="border:0px;font-style:inherit;margin:0px;padding:0px 5px;vertical-align:baseline;text-align:center;height:15px;"> 
 2 
 </div> 
 <div style="border:0px;font-style:inherit;margin:0px;padding:0px 5px;vertical-align:baseline;text-align:center;height:15px;background:0px 50%;"> 
 3 
 </div> 
 <div style="border:0px;font-style:inherit;margin:0px;padding:0px 5px;vertical-align:baseline;text-align:center;height:15px;"> 
 4 
 </div> 
 <div style="border:0px;font-style:inherit;margin:0px;padding:0px 5px;vertical-align:baseline;text-align:center;height:15px;background:0px 50%;"> 
 5 
 </div> 
 <div style="border:0px;font-style:inherit;margin:0px;padding:0px 5px;vertical-align:baseline;text-align:center;height:15px;"> 
 6 
 </div> 
 <div style="border:0px;font-style:inherit;margin:0px;padding:0px 5px;vertical-align:baseline;text-align:center;height:30px;background:0px 50%;"> 
 7 
 </div> 
 <div style="border:0px;font-style:inherit;margin:0px;padding:0px 5px;vertical-align:baseline;text-align:center;height:15px;"> 
 8 
 </div> 
 <div style="border:0px;font-style:inherit;margin:0px;padding:0px 5px;vertical-align:baseline;text-align:center;height:30px;background:0px 50%;"> 
 9 
 </div> 
 <div style="border:0px;font-style:inherit;margin:0px;padding:0px 5px;vertical-align:baseline;text-align:center;height:30px;"> 
 10 
 </div> 
 <div style="border:0px;font-style:inherit;margin:0px;padding:0px 5px;vertical-align:baseline;text-align:center;height:15px;background:0px 50%;"> 
 11 
 </div> 
 <div style="border:0px;font-style:inherit;margin:0px;padding:0px 5px;vertical-align:baseline;text-align:center;height:15px;"> 
 12 
 </div> 
 <div style="border:0px;font-style:inherit;margin:0px;padding:0px 5px;vertical-align:baseline;text-align:center;height:15px;background:0px 50%;"> 
 13 
 </div> 
 <div style="border:0px;font-style:inherit;margin:0px;padding:0px 5px;vertical-align:baseline;text-align:center;height:15px;"> 
 14 
 </div> 
 <div style="border:0px;font-style:inherit;margin:0px;padding:0px 5px;vertical-align:baseline;text-align:center;height:15px;background:0px 50%;"> 
 15 
 </div> 
 <div style="border:0px;font-style:inherit;margin:0px;padding:0px 5px;vertical-align:baseline;text-align:center;height:15px;"> 
 16 
 </div> 
 </div></td> 
 <td style="border:0px;font-size:12px;font-style:inherit;width:723px;margin:0px;padding:0px;vertical-align:top;background:0px 50%;"> 
 <div style="font-style:inherit;font-weight:inherit;margin:0px;padding:0px;vertical-align:baseline;white-space:pre;border:none;color:rgb(249,248,248);line-height:15px;background:none;"> 
 <div style="border:0px;font-style:inherit;margin:0px;padding:0px 5px;vertical-align:baseline;height:inherit;white-space:pre-wrap;background:0px 50%;"> 
 &nbsp; 
 </div> 
 <div style="border:0px;font-style:inherit;margin:0px;padding:0px 5px;vertical-align:baseline;height:inherit;white-space:pre-wrap;"> 
 git clone https://github.com/nVisium/xssValidator 
 </div> 
 <div style="border:0px;font-style:inherit;margin:0px;padding:0px 5px;vertical-align:baseline;height:inherit;white-space:pre-wrap;background:0px 50%;"> 
 cd xssValidator; 
 </div> 
 <div style="border:0px;font-style:inherit;margin:0px;padding:0px 5px;vertical-align:baseline;height:inherit;white-space:pre-wrap;"> 
 mkdir ./burp-extender/lib 
 </div> 
 <div style="border:0px;font-style:inherit;margin:0px;padding:0px 5px;vertical-align:baseline;height:inherit;white-space:pre-wrap;background:0px 50%;"> 
 cd burp-extender/lib 
 </div> 
 <div style="border:0px;font-style:inherit;margin:0px;padding:0px 5px;vertical-align:baseline;height:inherit;white-space:pre-wrap;"> 
 wget http://central.maven.org/maven2/commons-codec/commons-codec/1.6/commons-codec-1.6.jar 
 </div> 
 <div style="border:0px;font-style:inherit;margin:0px;padding:0px 5px;vertical-align:baseline;height:inherit;white-space:pre-wrap;background:0px 50%;"> 
 wget http://central.maven.org/maven2/commons-logging/commons-logging/1.1.3/commons-logging-1.1.3.jar 
 </div> 
 <div style="border:0px;font-style:inherit;margin:0px;padding:0px 5px;vertical-align:baseline;height:inherit;white-space:pre-wrap;"> 
 wget http://central.maven.org/maven2/org/apache/httpcomponents/fluent-hc/4.3.6/fluent-hc-4.3.6.jar 
 </div> 
 <div style="border:0px;font-style:inherit;margin:0px;padding:0px 5px;vertical-align:baseline;height:inherit;white-space:pre-wrap;background:0px 50%;"> 
 wget http://central.maven.org/maven2/org/apache/httpcomponents/httpclient/4.3.6/httpclient-4.3.6.jar 
 </div> 
 <div style="border:0px;font-style:inherit;margin:0px;padding:0px 5px;vertical-align:baseline;height:inherit;white-space:pre-wrap;"> 
 wget http://central.maven.org/maven2/org/apache/httpcomponents/httpclient-cache/4.3.6/httpclient-cache-4.3.6.jar 
 </div> 
 <div style="border:0px;font-style:inherit;margin:0px;padding:0px 5px;vertical-align:baseline;height:inherit;white-space:pre-wrap;background:0px 50%;"> 
 wget http://central.maven.org/maven2/org/apache/httpcomponents/httpcore/4.3.3/httpcore-4.3.3.jar 
 </div> 
 <div style="border:0px;font-style:inherit;margin:0px;padding:0px 5px;vertical-align:baseline;height:inherit;white-space:pre-wrap;"> 
 wget http://central.maven.org/maven2/org/apache/httpcomponents/httpmime/4.3.6/httpmime-4.3.6.jar 
 </div> 
 <div style="border:0px;font-style:inherit;margin:0px;padding:0px 5px;vertical-align:baseline;height:inherit;white-space:pre-wrap;background:0px 50%;"> 
 cd ../../burp-extender/bin/burp 
 </div> 
 <div style="border:0px;font-style:inherit;margin:0px;padding:0px 5px;vertical-align:baseline;height:inherit;white-space:pre-wrap;"> 
 ant; 
 </div> 
 <div style="border:0px;font-style:inherit;margin:0px;padding:0px 5px;vertical-align:baseline;height:inherit;white-space:pre-wrap;background:0px 50%;"> 
 ls bin/burp/xssValidator.jar; 
 </div> 
 <div style="border:0px;font-style:inherit;margin:0px;padding:0px 5px;vertical-align:baseline;height:inherit;white-space:pre-wrap;"> 
 &nbsp; 
 </div> 
 </div></td> 
 </tr> 
 </tbody> 
</table>

# 启动xss服务(这个必须有） #

# 配置插件xssValidator #

![image\_1bpb9uuess3713ehd5q1ang8d172.png-138.6kB][image_1bpb9uuess3713ehd5q1ang8d172.png-138.6kB]

# 使用插件 #

## 代理功能（目的是抓取真实的http请求报文） ##

![image\_1bpb8n60024oueo1csr1c0vm5q2j.png-232kB][image_1bpb8n60024oueo1csr1c0vm5q2j.png-232kB]

## 配置好浏览器代理地址后发起请求，burp会捕获到请求，点击forward ##

![image\_1bpb8q3271gmptv34cj1o151e9930.png-159.3kB][image_1bpb8q3271gmptv34cj1o151e9930.png-159.3kB]

## 找到对应的请求历史记录，并发送到intruder ##

![image\_1bpb8tfd51mcudj71hh0dp41j83d.png-310.8kB][image_1bpb8tfd51mcudj71hh0dp41j83d.png-310.8kB]

## 配置payloads为xssValidator ##

![image\_1bpb92n2c1ct91jue5iv1jvu1maa3q.png-213.3kB][image_1bpb92n2c1ct91jue5iv1jvu1maa3q.png-213.3kB]

## 配置options的grep – match ##

![image\_1bpb963drtho9qd4csgunet747.png-122.5kB][image_1bpb963drtho9qd4csgunet747.png-122.5kB]

## 对应字符串的出处 ##

![image\_1bpb8ikrd1coie1e1q87o73egk16.png-242.1kB][image_1bpb8ikrd1coie1e1q87o73egk16.png-242.1kB]

## 修改请求参数，并开始xss扫描 ##

![image\_1bpb9apf3jm93ti1018ivf7fk51.png-178.9kB][image_1bpb9apf3jm93ti1018ivf7fk51.png-178.9kB]

## 查看单独的结果（有勾选的就是有xss漏洞的） ##

![image\_1bpb9epcjvhn1d6f1d0oqjs1mmj5e.png-217.8kB][image_1bpb9epcjvhn1d6f1d0oqjs1mmj5e.png-217.8kB]

## 把对话框出现的url地址copy到浏览器访问，并在显示的地址点击按钮 ##

![image\_1bpb9ip6s1t7j47u1489ot1fdk5r.png-101.3kB][image_1bpb9ip6s1t7j47u1489ot1fdk5r.png-101.3kB]  
![image\_1bpb9lj5c3apc6ek1g18gchd56l.png-37.9kB][image_1bpb9lj5c3apc6ek1g18gchd56l.png-37.9kB]

## 最后看到xss漏洞的现象 ##

![image\_1bpb9k49e1551hcf9im40nfje68.png-133.3kB][image_1bpb9k49e1551hcf9im40nfje68.png-133.3kB]

[https_portswigger.net_burp_releases_download_product_free_version_1.7.27_type_macosx]: https://portswigger.net/burp/releases/download?product=free&version=1.7.27&type=macosx
[https_bitbucket.org_ariya_phantomjs_downloads_phantomjs-2.1.1-macosx.zip]: https://bitbucket.org/ariya/phantomjs/downloads/phantomjs-2.1.1-macosx.zip
[image_1bpb9uuess3713ehd5q1ang8d172.png-138.6kB]: /images/20220527/9b0fa34f0b35411dbab0574533d2e7ec.png
[image_1bpb8n60024oueo1csr1c0vm5q2j.png-232kB]: /images/20220527/dcbc9ffbcab44c3e85a895dbe9331c1f.png
[image_1bpb8q3271gmptv34cj1o151e9930.png-159.3kB]: /images/20220527/6ca83595d5b8459aa878cc7cdaf9251a.png
[image_1bpb8tfd51mcudj71hh0dp41j83d.png-310.8kB]: /images/20220527/51707788f5ce4a81a712d74f738dd5a7.png
[image_1bpb92n2c1ct91jue5iv1jvu1maa3q.png-213.3kB]: /images/20220527/c0e049af60734663940d6c2177e2722e.png
[image_1bpb963drtho9qd4csgunet747.png-122.5kB]: /images/20220527/06e74c83c9b345278ef0147a1de70eb8.png
[image_1bpb8ikrd1coie1e1q87o73egk16.png-242.1kB]: /images/20220527/c1fdfb9d42c24cbb9203be0b69c57d07.png
[image_1bpb9apf3jm93ti1018ivf7fk51.png-178.9kB]: /images/20220527/5f051e5063b347d6b3964d37b1942716.png
[image_1bpb9epcjvhn1d6f1d0oqjs1mmj5e.png-217.8kB]: /images/20220527/802ef7f98ada451e989ca9620c2fd70b.png
[image_1bpb9ip6s1t7j47u1489ot1fdk5r.png-101.3kB]: /images/20220527/072f3956ec604c7ba6bbc3401d9595eb.png
[image_1bpb9lj5c3apc6ek1g18gchd56l.png-37.9kB]: /images/20220527/b7b37e34414947cbab8fa2c1f7217ad0.png
[image_1bpb9k49e1551hcf9im40nfje68.png-133.3kB]: /images/20220527/35f37bd579834b2aaa970f1501aa737a.png