InfoSec Write-ups

A collection of write-ups from the best hackers in the world on topics ranging from bug bounties and CTFs to vulnhub machines, hardware challenges and real life encounters. Subscribe to our weekly newsletter for the coolest infosec updates: https://weekly.infosecwriteups.com/

Follow publication

Easy XSSHunter Express Setup Script

Adam J Sturge
InfoSec Write-ups
Published in
3 min readJan 14, 2023

Recently XSSHunter.com decided to stop signups and soon stopping its services. You’ll need to host your own version of XSSHunter. I wrote an article about my fork of XSSHunter Express. Since making that article I wanted to make the process of setting up XSSHunter easier so I made a script for it. I’ll be referencing my repo https://github.com/adamjsturge/easy-xsshunter-express throughout this article.

Note: Discord Integration was recently added and is included in the new setup script. I wrote a more in-depth write up below

Easy XSSHunter Express Running

Before we get started, you’ll need a VPS. I recommend VPSCheap and Digital Ocean. You’ll also need a domain/subdomain that points to your VPS's IP.

Installation

First step is to grab the script for Github.

curl -fsSL https://raw.githubusercontent.com/adamjsturge/easy-xsshunter-express/master/easy-xsshunter-express.sh -o easy-xsshunter-express.sh

Once we grab the script, we are going to run it with bash.

sudo bash easy-xsshunter-express.sh

The script is now going to prompt you through the setup. We are going to decide wether we need docker installed or we if we already have it installed.

After that, we have will have to choose between which Github repo we want to pull from. The official repo or my forked repo. The biggest benefit of the forked repo is having access to slack/discord alerts. I programmed it and think it’s incredibly helpful when using this tool.

The basic setup is gonna be the thing that saves you the most time. It will prompt you for environment variables. You can leave options blank to keep the default options. If you skip past any of the variables, you’ll need to go into docker-compose.yml and make changes. I recommend reading the xsshunter-express README.md if you have to make changes.

To start the application you’ll need to use the commands below. I still recommend reading the original README.md because…

Create an account to read the full story.

The author made this story available to Medium members only.
If you’re new to Medium, create a new account to read this story on us.

Or, continue in mobile web

Already have an account? Sign in

Published in InfoSec Write-ups

A collection of write-ups from the best hackers in the world on topics ranging from bug bounties and CTFs to vulnhub machines, hardware challenges and real life encounters. Subscribe to our weekly newsletter for the coolest infosec updates: https://weekly.infosecwriteups.com/

Responses (1)

Write a response