Back to Templates
XSSHunter logo

XSSHunter

vlatest

XSSHunter is an open-source platform designed to identify and exploit blind Cross-Site Scripting (XSS) vulnerabilities. It provides security researchers, bug bounty hunters, and penetration testers with a comprehensive toolkit for detecting XSS flaws that are otherwise difficult to discover through traditional testing methods.

pentestxsshunterbugbounty
Deploy on Dokploy
Website GitHub Documentation

Deploy XSSHunter on Dokploy

  1. Install Dokploy on your server if you haven't already.
  2. In your Dokploy panel, open a project and click Create Service → Template.
  3. Search for XSSHunter and click Create — Dokploy configures domains, environment variables, and volumes for you.

Alternatively, create a Compose service, go to Advanced → Import from Base64, and paste this payload:

base64
ewogICJjb21wb3NlIjogIiN2ZXJzaW9uOiAnMy44J1xuXG5zZXJ2aWNlczpcbiAgeHNzaHVudGVyZXhwcmVzcy1kYjpcbiAgICBpbWFnZTogcG9zdGdyZXM6MTUtYWxwaW5lXG4gICAgcmVzdGFydDogdW5sZXNzLXN0b3BwZWRcbiAgICBlbnZpcm9ubWVudDpcbiAgICAgIFBPU1RHUkVTX0RCOiAke1BPU1RHUkVTX0RCOi14c3NodW50ZXJleHByZXNzfVxuICAgICAgUE9TVEdSRVNfVVNFUjogJHtQT1NUR1JFU19VU0VSOi14c3NodW50ZXJleHByZXNzfVxuICAgICAgUE9TVEdSRVNfUEFTU1dPUkQ6ICR7UE9TVEdSRVNfUEFTU1dPUkQ6LXhzc2h1bnRlcmV4cHJlc3N9XG4gICAgICBQR0RBVEE6IC92YXIvbGliL3Bvc3RncmVzcWwvZGF0YS9wZ2RhdGFcbiAgICAgIFBPU1RHUkVTX0hPU1RfQVVUSF9NRVRIT0Q6IHRydXN0XG4gICAgaGVhbHRoY2hlY2s6XG4gICAgICB0ZXN0OiBbXCJDTUQtU0hFTExcIiwgXCJwZ19pc3JlYWR5IC1VICR7UE9TVEdSRVNfVVNFUjoteHNzaHVudGVyZXhwcmVzc31cIl1cbiAgICAgIGludGVydmFsOiAxMHNcbiAgICAgIHRpbWVvdXQ6IDVzXG4gICAgICByZXRyaWVzOiA1XG4gICAgICBzdGFydF9wZXJpb2Q6IDMwc1xuICAgIHZvbHVtZXM6XG4gICAgICAtIHBvc3RncmVzX2RhdGE6L3Zhci9saWIvcG9zdGdyZXNxbC9kYXRhL3BnZGF0YVxuXG4gIHhzc2h1bnRlcmV4cHJlc3Mtc2VydmljZTpcbiAgICBidWlsZDogaHR0cHM6Ly9naXRodWIuY29tL3JzLWxvdmVzLWJ1Z3MveHNzaHVudGVyLmdpdFxuICAgIHJlc3RhcnQ6IHVubGVzcy1zdG9wcGVkXG4gICAgZW52aXJvbm1lbnQ6XG4gICAgICAjIENvcmUgQ29uZmlndXJhdGlvblxuICAgICAgU0VTU0lPTl9TRUNSRVRfS0VZOiAke1NFU1NJT05fU0VDUkVUX0tFWX1cbiAgICAgIEhPU1ROQU1FOiAke0hPU1ROQU1FfVxuICAgICAgWFNTX0hPU1ROQU1FOiAke1hTU19IT1NUTkFNRX1cbiAgICAgIFxuICAgICAgIyBQYW5lbCBDb25maWd1cmF0aW9uXG4gICAgICBQQU5FTF9MT0dJTjogJHtQQU5FTF9MT0dJTjotdHJ1ZX1cbiAgICAgIFBBTkVMX1VTRVJOQU1FOiAke1BBTkVMX1VTRVJOQU1FfVxuICAgICAgUEFORUxfUEFTU1dPUkQ6ICR7UEFORUxfUEFTU1dPUkR9XG4gICAgICBBTExPV19FTVBUWV9VU0VSUEFUSDogJHtBTExPV19FTVBUWV9VU0VSUEFUSDotdHJ1ZX1cbiAgICAgIFxuICAgICAgIyBPQXV0aCBDb25maWd1cmF0aW9uXG4gICAgICBPQVVUSF9MT0dJTjogJHtPQVVUSF9MT0dJTjotZmFsc2V9XG4gICAgICBDTElFTlRfSUQ6ICR7Q0xJRU5UX0lEOi19XG4gICAgICBDTElFTlRfU0VDUkVUOiAke0NMSUVOVF9TRUNSRVQ6LX1cbiAgICAgIEdNQUlMX0FDQ09VTlRTOiAke0dNQUlMX0FDQ09VTlRTOi19XG4gICAgICBcbiAgICAgICMgRW1haWwgQ29uZmlndXJhdGlvblxuICAgICAgRU1BSUxfTk9USUZJQ0FUSU9OU19FTkFCTEVEOiAke0VNQUlMX05PVElGSUNBVElPTlNfRU5BQkxFRDotZmFsc2V9XG4gICAgICBFTUFJTF9GUk9NOiAke0VNQUlMX0ZST006LX1cbiAgICAgIFNFTkRHUklEX0FQSV9LRVk6ICR7U0VOREdSSURfQVBJX0tFWTotfVxuICAgICAgU0VOREdSSURfVU5TVUJTUklCRV9HUk9VUF9JRDogJHtTRU5ER1JJRF9VTlNVQlNSSUJFX0dST1VQX0lEOi19XG4gICAgICBcbiAgICAgICMgRGF0YWJhc2UgQ29uZmlndXJhdGlvblxuICAgICAgREFUQUJBU0VfSE9TVDogeHNzaHVudGVyZXhwcmVzcy1kYlxuICAgICAgUE9TVEdSRVNfREI6ICR7UE9TVEdSRVNfREI6LXhzc2h1bnRlcmV4cHJlc3N9XG4gICAgICBQT1NUR1JFU19VU0VSOiAke1BPU1RHUkVTX1VTRVI6LXhzc2h1bnRlcmV4cHJlc3N9XG4gICAgICBQT1NUR1JFU19QQVNTV09SRDogJHtQT1NUR1JFU19QQVNTV09SRDoteHNzaHVudGVyZXhwcmVzc31cbiAgICAgIFxuICAgICAgIyBBcHBsaWNhdGlvbiBDb25maWd1cmF0aW9uXG4gICAgICBOT0RFX0VOVjogJHtOT0RFX0VOVjotcHJvZHVjdGlvbn1cbiAgICAgIFBPUlQ6ICR7UE9SVH1cbiAgICAgIENPTlRST0xfUEFORUxfRU5BQkxFRDogJHtDT05UUk9MX1BBTkVMX0VOQUJMRUQ6LXRydWV9XG4gICAgICBTQ1JFRU5TSE9UU19ESVI6IC9hcHAvcGF5bG9hZC1maXJlLWltYWdlc1xuICAgICAgVFJVRkZMRUhPR19VUkw6IGh0dHA6Ly8ke1RSVUZGTEVIT0dfSE9TVDoteHNzaHVudGVyZXhwcmVzcy10cnVmZmxlaG9nfToke1RSVUZGTEVIT0dfUE9SVDotODAwMH0vdHJ1ZmZsZWhvZ1xuICAgICAgXG4gICAgICAjIE9wdGlvbmFsIFNlcnZpY2VzXG4gICAgICBTRU5UUllfRFNOOiAke1NFTlRSWV9EU046LX1cbiAgICAgIFNFTlRSWV9FTkFCTEVEOiAke1NFTlRSWV9FTkFCTEVEOi1mYWxzZX1cbiAgICAgIFVTRV9DTE9VRF9TVE9SQUdFOiAke1VTRV9DTE9VRF9TVE9SQUdFOi1mYWxzZX1cbiAgICAgIEJVQ0tFVF9OQU1FOiAke0JVQ0tFVF9OQU1FOi19XG4gICAgZXhwb3NlOlxuICAgICAgLSAke1BPUlQ6LTgwODB9XG4gICAgdm9sdW1lczpcbiAgICAgIC0gcGF5bG9hZF9pbWFnZXM6L2FwcC9wYXlsb2FkLWZpcmUtaW1hZ2VzXG4gICAgZGVwZW5kc19vbjpcbiAgICAgIHhzc2h1bnRlcmV4cHJlc3MtZGI6XG4gICAgICAgIGNvbmRpdGlvbjogc2VydmljZV9oZWFsdGh5XG5cbiAgeHNzaHVudGVyZXhwcmVzcy10cnVmZmxlaG9nOlxuICAgIGJ1aWxkOlxuICAgICAgY29udGV4dDogaHR0cHM6Ly9naXRodWIuY29tL3JzLWxvdmVzLWJ1Z3MveHNzaHVudGVyLmdpdFxuICAgICAgZG9ja2VyZmlsZTogRG9ja2VyZmlsZS50cnVmZmxlaG9nXG4gICAgcmVzdGFydDogdW5sZXNzLXN0b3BwZWRcbiAgICBleHBvc2U6XG4gICAgICAtICR7VFJVRkZMRUhPR19QT1JUOi04MDAwfVxuXG52b2x1bWVzOlxuICBwb3N0Z3Jlc19kYXRhOlxuICAgIGRyaXZlcjogbG9jYWxcbiAgcGF5bG9hZF9pbWFnZXM6XG4gICAgZHJpdmVyOiBsb2NhbCIsCiAgImNvbmZpZyI6ICJbdmFyaWFibGVzXVxuYWRtaW5fZG9tYWluID0gXCIke2RvbWFpbn1cIlxueHNzX2RvbWFpbiA9IFwiJHtkb21haW59XCJcbnNlc3Npb25fc2VjcmV0ID0gXCIke2Jhc2U2NDo2NH1cIlxuYWRtaW5fcGFzc3dvcmQgPSBcIiR7cGFzc3dvcmQ6MzJ9XCJcbmRiX3Bhc3N3b3JkID0gXCIke3Bhc3N3b3JkOjE2fVwiXG5wb3N0Z3Jlc191c2VyID0gXCJ4c3NodW50ZXJleHByZXNzXCJcbnBvc3RncmVzX2RiID0gXCJ4c3NodW50ZXJleHByZXNzXCJcblxuW2NvbmZpZ11cbltbY29uZmlnLmRvbWFpbnNdXVxuc2VydmljZU5hbWUgPSBcInhzc2h1bnRlcmV4cHJlc3Mtc2VydmljZVwiXG5wb3J0ID0gODA4MFxuaG9zdCA9IFwiJHthZG1pbl9kb21haW59XCJcblxuW1tjb25maWcuZG9tYWluc11dXG5zZXJ2aWNlTmFtZSA9IFwieHNzaHVudGVyZXhwcmVzcy1zZXJ2aWNlXCJcbnBvcnQgPSA4MDgwXG5ob3N0ID0gXCJ4c3MuJHthZG1pbl9kb21haW59XCJcblxuW2NvbmZpZy5lbnZdXG4jIENvcmUgQ29uZmlndXJhdGlvblxuU0VTU0lPTl9TRUNSRVRfS0VZID0gXCIke3Nlc3Npb25fc2VjcmV0fVwiXG5IT1NUTkFNRSA9IFwiJHthZG1pbl9kb21haW59XCJcblhTU19IT1NUTkFNRSA9IFwieHNzLiR7YWRtaW5fZG9tYWlufVwiXG5cbiMgUGFuZWwgQ29uZmlndXJhdGlvblxuUEFORUxfTE9HSU4gPSBcInRydWVcIlxuUEFORUxfVVNFUk5BTUUgPSBcImFkbWluQCR7YWRtaW5fZG9tYWlufVwiXG5QQU5FTF9QQVNTV09SRCA9ICcke2FkbWluX3Bhc3N3b3JkfScgIyBbIHVzZSBzaW5nbGUgcXVvdGUgdG8gYXZvaWQgdGhlIHByb2JsZW1dIGp1c3QgdG8gbGV0IHlvdSBrbm93IHRha2VjYXJlIG9mIHRoZSBzcGVjaWFsIGNoYXJhY3RlcnMsIGl0IHdpbGwgbWFrZSB5b3VyIHBhc3N3b3JkIGludmFsaWQsIHNvIG1ha2UgYSBzdHJvbmcgcGFzc3dvcmQgd2l0aG91dCBzcGVjaWFsIGNoYXJhY3RlcnNcbkFMTE9XX0VNUFRZX1VTRVJQQVRIID0gXCJ0cnVlXCJcblxuIyBPQXV0aCBDb25maWd1cmF0aW9uIChkaXNhYmxlZCBieSBkZWZhdWx0KVxuT0FVVEhfTE9HSU4gPSBcImZhbHNlXCJcbkNMSUVOVF9JRCA9IFwiXCJcbkNMSUVOVF9TRUNSRVQgPSBcIlwiXG5HTUFJTF9BQ0NPVU5UUyA9IFwiXCJcblxuIyBFbWFpbCBDb25maWd1cmF0aW9uIChkaXNhYmxlZCBieSBkZWZhdWx0KVxuRU1BSUxfTk9USUZJQ0FUSU9OU19FTkFCTEVEID0gXCJmYWxzZVwiXG5FTUFJTF9GUk9NID0gXCJcIlxuU0VOREdSSURfQVBJX0tFWSA9IFwiXCJcblNFTkRHUklEX1VOU1VCU1JJQkVfR1JPVVBfSUQgPSBcIlwiXG5cbiMgRGF0YWJhc2UgQ29uZmlndXJhdGlvblxuREFUQUJBU0VfSE9TVCA9IFwieHNzaHVudGVyZXhwcmVzcy1kYlwiXG5QT1NUR1JFU19EQiA9IFwiJHtwb3N0Z3Jlc19kYn1cIlxuUE9TVEdSRVNfVVNFUiA9IFwiJHtwb3N0Z3Jlc191c2VyfVwiXG5QT1NUR1JFU19QQVNTV09SRCA9IFwiJHtkYl9wYXNzd29yZH1cIlxuXG4jIEFwcGxpY2F0aW9uIENvbmZpZ3VyYXRpb25cbk5PREVfRU5WID0gXCJwcm9kdWN0aW9uXCJcblBPUlQgPSBcIjgwODBcIlxuQ09OVFJPTF9QQU5FTF9FTkFCTEVEID0gXCJ0cnVlXCJcblNDUkVFTlNIT1RTX0RJUiA9IFwiL2FwcC9wYXlsb2FkLWZpcmUtaW1hZ2VzXCJcblRSVUZGTEVIT0dfVVJMID0gXCJodHRwOi8vJHtUUlVGRkxFSE9HX0hPU1R9OiR7VFJVRkZMRUhPR19QT1JUfS90cnVmZmxlaG9nXCJcblxuIyBQb3J0IENvbmZpZ3VyYXRpb25cbkFQUF9QT1JUID0gXCI4MDgwXCJcblRSVUZGTEVIT0dfSE9TVCA9IFwieHNzaHVudGVyZXhwcmVzcy10cnVmZmxlaG9nXCJcblRSVUZGTEVIT0dfUE9SVCA9IFwiODAwMFwiXG5cbiMgT3B0aW9uYWwgU2VydmljZXMgKGRpc2FibGVkIGJ5IGRlZmF1bHQpXG5TRU5UUllfRFNOID0gXCJcIlxuU0VOVFJZX0VOQUJMRUQgPSBcImZhbHNlXCJcblVTRV9DTE9VRF9TVE9SQUdFID0gXCJmYWxzZVwiXG5CVUNLRVRfTkFNRSA9IFwiXCJcblxuW1tjb25maWcubW91bnRzXV1cbmZpbGVQYXRoID0gXCIuL3BheWxvYWQtZmlyZS1pbWFnZXNcIlxuY29udGVudCA9IFwiRGlyZWN0b3J5IGZvciBzdG9yaW5nIFhTUyBwYXlsb2FkIHNjcmVlbnNob3RzIGFuZCBjb2xsZWN0ZWQgZGF0YVwiIgp9

Configuration

The exact Docker Compose and template configuration this template deploys.

Self-host XSSHunter in minutes

Dokploy is a free, open source deployment platform. Deploy XSSHunter and 499+ other templates on your own infrastructure with a single click.

Get StartedBrowse All Templates