ezXSS Files

I'm excited to finally announce the release of ezXSS v4.3! Following the complete codebase rewrite, the introduction of persistent XSS sessions with reverse proxy and the performance enhancements in v4.0-4.2, this release brings powerful new features, improved compatibility, and a more polished experience. All information about installing, updating and using ezXSS can be found on the GitHub wiki: https://github.com/ssl/ezXSS/wiki

Added and fixed in this version: - Extensions! Create or install ezXSS extensions to enhance or modify payloads - Add extra custom data to reports using extensions or payload's custom JS. - Added automatic (recursive) spider that extracts found pages. - New user role that can create new payloads. - Custom JS can now be added pre- and post-callbacks. - Improved persistent sessions with better connectivity and auto-reconnect. - Polished design across all pages. Improved styling, fixed responsiveness. - Now triggers in even the oldest browsers, starting from Chrome 1+. - Faster performance through optimized queries. - 10 new theme options to pick from. - Bug fixes and improvements all over, including MFA QR code, APIs, code cleanup and more small things.

The little bug fixes and design improvements make ezXSS 4.3 work and feel better than ever before. Especially if you currently run a ezXSS instance before 4.2, updating is mandatory to make sure you don't miss out on any potential reports coming in!

Check out the extensions repository to find some examples and documentation to start creating your own extensions: https://github.com/ssl/ezXSS-extensions

Your feedback and contributions have been important in shaping ezXSS into the robust tool it is today. Thanks everyone for using ezXSS and please consider supporting the project by submitting new code, feature requests, issue reporting or by donating through Github Sponsors <3.