installation

[ghost]

please can i know how to install this tools :(
i try to clone the main.go and follow steps on last issue , but didn't work

[wfinn]

You need to have golang installed and then run the command tomnomnom listed in the README.md of the program you want to install.
For kxss that would be:

go get -u github.com/tomnomnom/hacks/kxss

It might be go.exe on Windows, idk.

Read more about installing go: https://golang.org/doc/install

Since you talk about the last issue, you might just want to cd into the repo and run go build (without the main.go, because there might be more go files).

[ghost]

thank you so much , can i know how to use this tool ? i read the Readme file , don't get to much :(

[wfinn]

You may want to get a list of urls with tomnomnoms waybackurls, then grep though it for = (to find urls with get parameters like ?x=y) and then just pipe it to kxss.
So basically echo yourtargetdwebsite.com | waybackurls | grep = | kxss
Then you have a list of urls that might be vulnerable to xss, manually check them and with luck, you have a bug.
If you're on Windows, idk. Just play around with his tools for a while and watch the video he made with STÖK.

[ghost]

thank you so much for your time , really appreciate your help !

Best Regards,
Thank you

[Banduk1234]

We could not install this tool error is showing

[Nishantbhagat57]

Simple one line installation:
go install github.com/tomnomnom/hacks/tok@master
go install github.com/tomnomnom/hacks/kxss@master
...
...
and so on