Thanks to visit codestin.com
Credit goes to Github.com

Skip to content

ScriptFang is a weaponized payload generation and fuzzing toolkit I built for Red Teamers, Bug Bounty hunters, and offensive security professionals. ScriptFang crafts advanced XSS payloads, tests reflections, and fuzzes endpoints for weaknesses.

License

Notifications You must be signed in to change notification settings

Talyx66/SCRIPTFANG

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 
 
 
 
 
 
 

Repository files navigation

screenshot 2

Built Language Status Creator License OS

SCRIPTFANG - Advanced XSS Payload Generator & Fuzzer v2.0

Disclaimer:

  • ScriptFang is a powerful offensive security and payload generation toolkit, intended strictly for experienced cybersecurity professionals, Red-Team operators, and ethical hackers. Using this tool without proper authorization is illegal and may result in both civil and criminal penalties. The creator assumes no liability for any misuse, damage, or legal consequences arising from unauthorized usage. Always obtain explicit permission before using ScriptFang in any environment. ® All Rights Reserved *

Preview

screenshot 1

Live Preview

Live Demo 1

Recent Updates 8/17/25 SCRIPTFANG v2.0

updated ReadME format, image resize, New GUI background, Polished modules, hardened & more advanced feedback system, export error fixed, fuzzer=live feedback

Features:

|Diverse Payload Generation|

Generate classic, WAF bypass, Angular, script breakout, Cloudflare bypass payloads, and more.

|Multi-Payload Generation|

Create multiple payloads at once to maximize fuzzing coverage.

|Integrated Fuzzer|

Automatically fuzz target URLs with your entire payload arsenal. Tracks reflections, blocks, and errors in real time.

|Sleek GUI|

PyQt6-powered interface with live feedback, animated background, and intuitive controls.

|Export Capability|

Save results and payloads in JSON or CSV for offline analysis or manual testing.

Installation:

1.) Clone the Repository

1. git clone https://github.com/Talyx66/ScriptFang.git
2. cd ScriptFang
3. Install Requirements 
  1. (Make sure you're using Python 3.9+. Then install dependencies:)
pip install -r requirements.txt
(Ensure PyQt6, requests, beautifulsoup4, and lxml are included in requirements.txt)

Usage:

Run the tool:

python3 gui.py

Payload Management:

1. Payloads are stored in /tools/payloads/

2. Each .txt file corresponds to a specific category

3. Edit or expand these files to supercharge your fuzzing arsenal

Engineered & Developed by:

About

ScriptFang is a weaponized payload generation and fuzzing toolkit I built for Red Teamers, Bug Bounty hunters, and offensive security professionals. ScriptFang crafts advanced XSS payloads, tests reflections, and fuzzes endpoints for weaknesses.

Topics

Resources

License

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published

Languages