GOLDEN PLAN: $119.99/6 months

✅Get / Post:
Run XSS and vulnerability scansusing both GET and POST HTTP methods.

✅ Onlyalerts:
Display only triggeredalerts in the output, keeping results streamlined.

✅ Recon:
Perform full reconnaissanceincluding subdomain enumeration and URL crawling.

✅ Custom Headers:
Use --headersto inject custom HTTP headers into requests.

✅ Path:
Test by injecting payloadsdirectly into URL path segments.

✅ Cookies & Initialize:
Load cookiesand set up authenticated sessions for testing logged-in areas.

✅ User Agent:
Customize the User-Agentstring for scans to blend in or evade detection.

✅ Reflection:
Detect reflected inputs topinpoint XSS-prone parameters.

✅ Suffix / Prefix:
Append or prependstrings to payloads to bypass input filters.

✅ Blindusername:
Inject your xss0r.comusername into the User-Agent header for BlindXSS tracking.

✅ Spray (BlindXSS):
Run sprayingtechniques to discover stored and deferred XSS.

✅ Crawler:
Crawl internal pages deeply,increasing the attack surface.

✅ Fuzzer:
Fuzz inputs to test whatcharacters are filtered or encoded.

✅ Clickme:
Simulate mouse clicks andkeyboard events to trigger hidden DOM-based XSS.

✅ Limit:
Control the number of requestsper minute to avoid bans or WAF detection.

✅ Save / Resume:
Save scanning sessionsand resume them later from the exact same state.

✅ CRLF Injection:
Test for CRLF injectionvulnerabilities on subdomains or parameters.

✅ Inspector:
Advanced passive & activeinspection to find hidden endpoints.

✅ Stealth:
Run scans in low, medium, orhigh stealth mode to slip past advanced WAFs.

✅ All Mode:
Use --all tocombine query and path-based scanning in a single optimized pass.

✅ Fullscan:
Force execution of the entirepayload library for maximum coverage.

✅ Threads:
Supports 15 parallelthreads for ultra-fast scanning on large targets.

✅ Payloads:
Dynamic / virtually unlimitedpayload handling (n/a).

✅ Device Support:
Supports 2 Devices, on any OS.