BUSINESS PLAN: $339.99/year

✅Get / Post:
Run extensive XSS &vulnerability scans using both GET and POST methods.

✅ Onlyalerts:
Show only triggered alertsin the output, keeping logs clear and focused.

✅ Recon:
Full reconnaissance: domainenumeration, crawling, smart URL discovery.

✅ Custom Headers:
Use --headersto inject custom HTTP headers into requests.

✅ Path:
Inject payloads directly into URLpath segments.

✅ Cookies & Initialize:
Load cookiesand initialize sessions for authenticated scanning.

✅ User Agent:
Customize the User-Agentstring for stealth or advanced testing.

✅ Reflection:
Detect reflected parametersto pinpoint XSS-prone inputs.

✅ Suffix / Prefix:
Prepend or appendcustom strings to payloads for filter bypass.

✅ Blindusername:
Inject your xss0r.comusername into User-Agent for BlindXSS tracking.

✅ Spray (BlindXSS):
BlindXSS spraying todiscover stored and deferred vulnerabilities.

✅ Crawler:
Crawl internal links deeply,expanding attack surface automatically.

✅ Fuzzer:
Fuzz inputs to see whatcharacters are blocked, filtered, or encoded.

✅ Clickme:
Simulate mouse clicks andkeyboard actions to trigger DOM-based payloads.

✅ Limit:
Control requests per minute toavoid WAFs or rate limits.

✅ Save / Resume:
Save scan progress andresume it later without data loss.

✅ CRLF Injection:
Scan for CRLF injectionflaws on subdomains or query parameters.

✅ Inspector:
Advanced passive & activeinspection for hidden endpoints.

✅ Stealth:
Low / Medium / High stealthmodes to evade detection by advanced WAFs.

✅ All Mode:
Run combined path and queryscanning in one optimized execution.

✅ Fullscan:
Force execution of the entirepayload library for exhaustive testing.

✅ Threads:
Listed as n/a,typically means dynamically scales for enterprise workloads.

✅ Payloads:
Handles large or dynamicpayload sets (n/a).

1. ✅ Device Support:
   Supports 3 Devices, on any OS.
2. ⚠ License Details:
   • License: 3 User
   •Devices: Supports up to 3 devices on 3 different IP addresses