Example Usage
Usage of xssrecon:
-c, --concurrent int Number of concurrent workers for processing URLs (default: 50)
-H, --user-agent string Custom User-Agent header for HTTP requests. (default "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36")
-s, --skipspecialchar Only check rix4uni in response and move to next url, skip checking special characters.
-t, --timeout int Timeout for HTTP requests in seconds. (default 15)
--chromedp-concurrent int Number of concurrent ChromeDP browser instances (default 5)
--chromedp-timeout int ChromeDP page rendering timeout in seconds (default 30)
--no-chromedp Disable ChromeDP fallback
--json Output results in JSON format.
--no-color Do not use colored output.
--silent silent mode.
--specialchar string Custom special characters to test (single char or comma-separated, e.g., '<' or '<, >'). Cannot be used with --skipspecialchar.
--verbose Enable verbose output for debugging purposes.
--version
See also
-Ultimate-Cybersecurity-Roadmap
Free
Ultimate Cybersecurity Roadmap (2025 Edition) | Beginner to Advanced Guide | Learn Ethical Hacking, …
as-ip-blocks
Free
Download IP block lists by ASN - network provider addresses, updated daily…
365
Free
BlueTeam, RedTeam, Bug bounty, CTI, OSINT, Threat Hunting, Network and Web Recon, Discovery, Enumera…
horus
Open Source
An OSINT / digital forensics tool built in Python…
CVE_Prioritizer
Open Source
Streamline vulnerability patching with CVSS, EPSS, and CISA's Known Exploited Vulnerabilities. Prior…
Impacket
Open Source
Kali
Collection of Python classes for working with network protocols. Includes tools for SMB, MSRPC, LDAP…