Back to Templates
Deploy on Notploy
XSSHunter
vlatest
XSSHunter is an open-source platform designed to identify and exploit blind Cross-Site Scripting (XSS) vulnerabilities. It provides security researchers, bug bounty hunters, and penetration testers with a comprehensive toolkit for detecting XSS flaws that are otherwise difficult to discover through traditional testing methods.
How to deploy
Deploy XSSHunter on Notploy
- Install Notploy on your server if you haven't already.
- In your Notploy panel, open a project and click Create Service → Template.
- Search for XSSHunter and click Create — Notploy configures domains, environment variables, and volumes for you.
Alternatively, create a Compose service, go to Advanced → Import from Base64, and paste this payload:
base64
ewogICJjb21wb3NlIjogInNlcnZpY2VzOlxuICB4c3NodW50ZXJleHByZXNzLWRiOlxuICAgIGltYWdlOiBwb3N0Z3JlczoxNS1hbHBpbmVcbiAgICByZXN0YXJ0OiB1bmxlc3Mtc3RvcHBlZFxuICAgIGVudmlyb25tZW50OlxuICAgICAgUE9TVEdSRVNfREI6ICR7UE9TVEdSRVNfREI6LXhzc2h1bnRlcmV4cHJlc3N9XG4gICAgICBQT1NUR1JFU19VU0VSOiAke1BPU1RHUkVTX1VTRVI6LXhzc2h1bnRlcmV4cHJlc3N9XG4gICAgICBQT1NUR1JFU19QQVNTV09SRDogJHtQT1NUR1JFU19QQVNTV09SRDoteHNzaHVudGVyZXhwcmVzc31cbiAgICAgIFBHREFUQTogL3Zhci9saWIvcG9zdGdyZXNxbC9kYXRhL3BnZGF0YVxuICAgICAgUE9TVEdSRVNfSE9TVF9BVVRIX01FVEhPRDogdHJ1c3RcbiAgICBoZWFsdGhjaGVjazpcbiAgICAgIHRlc3Q6IFtcIkNNRC1TSEVMTFwiLCBcInBnX2lzcmVhZHkgLVUgJHtQT1NUR1JFU19VU0VSOi14c3NodW50ZXJleHByZXNzfVwiXVxuICAgICAgaW50ZXJ2YWw6IDEwc1xuICAgICAgdGltZW91dDogNXNcbiAgICAgIHJldHJpZXM6IDVcbiAgICAgIHN0YXJ0X3BlcmlvZDogMzBzXG4gICAgdm9sdW1lczpcbiAgICAgIC0gcG9zdGdyZXNfZGF0YTovdmFyL2xpYi9wb3N0Z3Jlc3FsL2RhdGEvcGdkYXRhXG5cbiAgeHNzaHVudGVyZXhwcmVzcy1zZXJ2aWNlOlxuICAgIGJ1aWxkOiBodHRwczovL2dpdGh1Yi5jb20vcnMtbG92ZXMtYnVncy94c3NodW50ZXIuZ2l0XG4gICAgcmVzdGFydDogdW5sZXNzLXN0b3BwZWRcbiAgICBlbnZpcm9ubWVudDpcbiAgICAgICMgQ29yZSBDb25maWd1cmF0aW9uXG4gICAgICBTRVNTSU9OX1NFQ1JFVF9LRVk6ICR7U0VTU0lPTl9TRUNSRVRfS0VZfVxuICAgICAgSE9TVE5BTUU6ICR7SE9TVE5BTUV9XG4gICAgICBYU1NfSE9TVE5BTUU6ICR7WFNTX0hPU1ROQU1FfVxuICAgICAgXG4gICAgICAjIFBhbmVsIENvbmZpZ3VyYXRpb25cbiAgICAgIFBBTkVMX0xPR0lOOiAke1BBTkVMX0xPR0lOOi10cnVlfVxuICAgICAgUEFORUxfVVNFUk5BTUU6ICR7UEFORUxfVVNFUk5BTUV9XG4gICAgICBQQU5FTF9QQVNTV09SRDogJHtQQU5FTF9QQVNTV09SRH1cbiAgICAgIEFMTE9XX0VNUFRZX1VTRVJQQVRIOiAke0FMTE9XX0VNUFRZX1VTRVJQQVRIOi10cnVlfVxuICAgICAgXG4gICAgICAjIE9BdXRoIENvbmZpZ3VyYXRpb25cbiAgICAgIE9BVVRIX0xPR0lOOiAke09BVVRIX0xPR0lOOi1mYWxzZX1cbiAgICAgIENMSUVOVF9JRDogJHtDTElFTlRfSUQ6LX1cbiAgICAgIENMSUVOVF9TRUNSRVQ6ICR7Q0xJRU5UX1NFQ1JFVDotfVxuICAgICAgR01BSUxfQUNDT1VOVFM6ICR7R01BSUxfQUNDT1VOVFM6LX1cbiAgICAgIFxuICAgICAgIyBFbWFpbCBDb25maWd1cmF0aW9uXG4gICAgICBFTUFJTF9OT1RJRklDQVRJT05TX0VOQUJMRUQ6ICR7RU1BSUxfTk9USUZJQ0FUSU9OU19FTkFCTEVEOi1mYWxzZX1cbiAgICAgIEVNQUlMX0ZST006ICR7RU1BSUxfRlJPTTotfVxuICAgICAgU0VOREdSSURfQVBJX0tFWTogJHtTRU5ER1JJRF9BUElfS0VZOi19XG4gICAgICBTRU5ER1JJRF9VTlNVQlNSSUJFX0dST1VQX0lEOiAke1NFTkRHUklEX1VOU1VCU1JJQkVfR1JPVVBfSUQ6LX1cbiAgICAgIFxuICAgICAgIyBEYXRhYmFzZSBDb25maWd1cmF0aW9uXG4gICAgICBEQVRBQkFTRV9IT1NUOiB4c3NodW50ZXJleHByZXNzLWRiXG4gICAgICBQT1NUR1JFU19EQjogJHtQT1NUR1JFU19EQjoteHNzaHVudGVyZXhwcmVzc31cbiAgICAgIFBPU1RHUkVTX1VTRVI6ICR7UE9TVEdSRVNfVVNFUjoteHNzaHVudGVyZXhwcmVzc31cbiAgICAgIFBPU1RHUkVTX1BBU1NXT1JEOiAke1BPU1RHUkVTX1BBU1NXT1JEOi14c3NodW50ZXJleHByZXNzfVxuICAgICAgXG4gICAgICAjIEFwcGxpY2F0aW9uIENvbmZpZ3VyYXRpb25cbiAgICAgIE5PREVfRU5WOiAke05PREVfRU5WOi1wcm9kdWN0aW9ufVxuICAgICAgUE9SVDogJHtQT1JUfVxuICAgICAgQ09OVFJPTF9QQU5FTF9FTkFCTEVEOiAke0NPTlRST0xfUEFORUxfRU5BQkxFRDotdHJ1ZX1cbiAgICAgIFNDUkVFTlNIT1RTX0RJUjogL2FwcC9wYXlsb2FkLWZpcmUtaW1hZ2VzXG4gICAgICBUUlVGRkxFSE9HX1VSTDogaHR0cDovLyR7VFJVRkZMRUhPR19IT1NUOi14c3NodW50ZXJleHByZXNzLXRydWZmbGVob2d9OiR7VFJVRkZMRUhPR19QT1JUOi04MDAwfS90cnVmZmxlaG9nXG4gICAgICBcbiAgICAgICMgT3B0aW9uYWwgU2VydmljZXNcbiAgICAgIFNFTlRSWV9EU046ICR7U0VOVFJZX0RTTjotfVxuICAgICAgU0VOVFJZX0VOQUJMRUQ6ICR7U0VOVFJZX0VOQUJMRUQ6LWZhbHNlfVxuICAgICAgVVNFX0NMT1VEX1NUT1JBR0U6ICR7VVNFX0NMT1VEX1NUT1JBR0U6LWZhbHNlfVxuICAgICAgQlVDS0VUX05BTUU6ICR7QlVDS0VUX05BTUU6LX1cbiAgICBleHBvc2U6XG4gICAgICAtICR7UE9SVDotODA4MH1cbiAgICB2b2x1bWVzOlxuICAgICAgLSBwYXlsb2FkX2ltYWdlczovYXBwL3BheWxvYWQtZmlyZS1pbWFnZXNcbiAgICBkZXBlbmRzX29uOlxuICAgICAgeHNzaHVudGVyZXhwcmVzcy1kYjpcbiAgICAgICAgY29uZGl0aW9uOiBzZXJ2aWNlX2hlYWx0aHlcblxuICB4c3NodW50ZXJleHByZXNzLXRydWZmbGVob2c6XG4gICAgYnVpbGQ6XG4gICAgICBjb250ZXh0OiBodHRwczovL2dpdGh1Yi5jb20vcnMtbG92ZXMtYnVncy94c3NodW50ZXIuZ2l0XG4gICAgICBkb2NrZXJmaWxlOiBEb2NrZXJmaWxlLnRydWZmbGVob2dcbiAgICByZXN0YXJ0OiB1bmxlc3Mtc3RvcHBlZFxuICAgIGV4cG9zZTpcbiAgICAgIC0gJHtUUlVGRkxFSE9HX1BPUlQ6LTgwMDB9XG5cbnZvbHVtZXM6XG4gIHBvc3RncmVzX2RhdGE6XG4gICAgZHJpdmVyOiBsb2NhbFxuICBwYXlsb2FkX2ltYWdlczpcbiAgICBkcml2ZXI6IGxvY2FsIiwKICAiY29uZmlnIjogIlt2YXJpYWJsZXNdXG5hZG1pbl9kb21haW4gPSBcIiR7ZG9tYWlufVwiXG54c3NfZG9tYWluID0gXCIke2RvbWFpbn1cIlxuc2Vzc2lvbl9zZWNyZXQgPSBcIiR7YmFzZTY0OjY0fVwiXG5hZG1pbl9wYXNzd29yZCA9IFwiJHtwYXNzd29yZDozMn1cIlxuZGJfcGFzc3dvcmQgPSBcIiR7cGFzc3dvcmQ6MTZ9XCJcbnBvc3RncmVzX3VzZXIgPSBcInhzc2h1bnRlcmV4cHJlc3NcIlxucG9zdGdyZXNfZGIgPSBcInhzc2h1bnRlcmV4cHJlc3NcIlxuXG5bY29uZmlnXVxuW1tjb25maWcuZG9tYWluc11dXG5zZXJ2aWNlTmFtZSA9IFwieHNzaHVudGVyZXhwcmVzcy1zZXJ2aWNlXCJcbnBvcnQgPSA4MDgwXG5ob3N0ID0gXCIke2FkbWluX2RvbWFpbn1cIlxuXG5bW2NvbmZpZy5kb21haW5zXV1cbnNlcnZpY2VOYW1lID0gXCJ4c3NodW50ZXJleHByZXNzLXNlcnZpY2VcIlxucG9ydCA9IDgwODBcbmhvc3QgPSBcInhzcy4ke2FkbWluX2RvbWFpbn1cIlxuXG5bY29uZmlnLmVudl1cbiMgQ29yZSBDb25maWd1cmF0aW9uXG5TRVNTSU9OX1NFQ1JFVF9LRVkgPSBcIiR7c2Vzc2lvbl9zZWNyZXR9XCJcbkhPU1ROQU1FID0gXCIke2FkbWluX2RvbWFpbn1cIlxuWFNTX0hPU1ROQU1FID0gXCJ4c3MuJHthZG1pbl9kb21haW59XCJcblxuIyBQYW5lbCBDb25maWd1cmF0aW9uXG5QQU5FTF9MT0dJTiA9IFwidHJ1ZVwiXG5QQU5FTF9VU0VSTkFNRSA9IFwiYWRtaW5AJHthZG1pbl9kb21haW59XCJcblBBTkVMX1BBU1NXT1JEID0gJyR7YWRtaW5fcGFzc3dvcmR9JyAjIFsgdXNlIHNpbmdsZSBxdW90ZSB0byBhdm9pZCB0aGUgcHJvYmxlbV0ganVzdCB0byBsZXQgeW91IGtub3cgdGFrZWNhcmUgb2YgdGhlIHNwZWNpYWwgY2hhcmFjdGVycywgaXQgd2lsbCBtYWtlIHlvdXIgcGFzc3dvcmQgaW52YWxpZCwgc28gbWFrZSBhIHN0cm9uZyBwYXNzd29yZCB3aXRob3V0IHNwZWNpYWwgY2hhcmFjdGVyc1xuQUxMT1dfRU1QVFlfVVNFUlBBVEggPSBcInRydWVcIlxuXG4jIE9BdXRoIENvbmZpZ3VyYXRpb24gKGRpc2FibGVkIGJ5IGRlZmF1bHQpXG5PQVVUSF9MT0dJTiA9IFwiZmFsc2VcIlxuQ0xJRU5UX0lEID0gXCJcIlxuQ0xJRU5UX1NFQ1JFVCA9IFwiXCJcbkdNQUlMX0FDQ09VTlRTID0gXCJcIlxuXG4jIEVtYWlsIENvbmZpZ3VyYXRpb24gKGRpc2FibGVkIGJ5IGRlZmF1bHQpXG5FTUFJTF9OT1RJRklDQVRJT05TX0VOQUJMRUQgPSBcImZhbHNlXCJcbkVNQUlMX0ZST00gPSBcIlwiXG5TRU5ER1JJRF9BUElfS0VZID0gXCJcIlxuU0VOREdSSURfVU5TVUJTUklCRV9HUk9VUF9JRCA9IFwiXCJcblxuIyBEYXRhYmFzZSBDb25maWd1cmF0aW9uXG5EQVRBQkFTRV9IT1NUID0gXCJ4c3NodW50ZXJleHByZXNzLWRiXCJcblBPU1RHUkVTX0RCID0gXCIke3Bvc3RncmVzX2RifVwiXG5QT1NUR1JFU19VU0VSID0gXCIke3Bvc3RncmVzX3VzZXJ9XCJcblBPU1RHUkVTX1BBU1NXT1JEID0gXCIke2RiX3Bhc3N3b3JkfVwiXG5cbiMgQXBwbGljYXRpb24gQ29uZmlndXJhdGlvblxuTk9ERV9FTlYgPSBcInByb2R1Y3Rpb25cIlxuUE9SVCA9IFwiODA4MFwiXG5DT05UUk9MX1BBTkVMX0VOQUJMRUQgPSBcInRydWVcIlxuU0NSRUVOU0hPVFNfRElSID0gXCIvYXBwL3BheWxvYWQtZmlyZS1pbWFnZXNcIlxuVFJVRkZMRUhPR19VUkwgPSBcImh0dHA6Ly8ke1RSVUZGTEVIT0dfSE9TVH06JHtUUlVGRkxFSE9HX1BPUlR9L3RydWZmbGVob2dcIlxuXG4jIFBvcnQgQ29uZmlndXJhdGlvblxuQVBQX1BPUlQgPSBcIjgwODBcIlxuVFJVRkZMRUhPR19IT1NUID0gXCJ4c3NodW50ZXJleHByZXNzLXRydWZmbGVob2dcIlxuVFJVRkZMRUhPR19QT1JUID0gXCI4MDAwXCJcblxuIyBPcHRpb25hbCBTZXJ2aWNlcyAoZGlzYWJsZWQgYnkgZGVmYXVsdClcblNFTlRSWV9EU04gPSBcIlwiXG5TRU5UUllfRU5BQkxFRCA9IFwiZmFsc2VcIlxuVVNFX0NMT1VEX1NUT1JBR0UgPSBcImZhbHNlXCJcbkJVQ0tFVF9OQU1FID0gXCJcIlxuXG5bW2NvbmZpZy5tb3VudHNdXVxuZmlsZVBhdGggPSBcIi4vcGF5bG9hZC1maXJlLWltYWdlc1wiXG5jb250ZW50ID0gXCJEaXJlY3RvcnkgZm9yIHN0b3JpbmcgWFNTIHBheWxvYWQgc2NyZWVuc2hvdHMgYW5kIGNvbGxlY3RlZCBkYXRhXCIiCn0=
Reference files
Configuration
The exact Docker Compose and template configuration this template deploys.
Free and open source
Self-host XSSHunter in minutes
Notploy is a free, open source deployment platform. Deploy XSSHunter and 571+ other templates on your own infrastructure with a single click.