This will be a setup guide for XSSHunter and integrating it with Discord Alerts. This will be very similar to my other article but with more details
The first step is to download the Github script.
curl -fsSL https://raw.githubusercontent.com/adamjsturge/easy-xsshunter-express/master/easy-xsshunter-express.sh -o easy-xsshunter-express.sh
Once we grab the script, we are going to run it with bash.
sudo bash easy-xsshunter-express.sh
You will first be prompted if you want to install Docker or not with the script. It’s easy to abort the Docker install, so don’t be afraid to try anything.
After Docker, pick the second option for my fork (github repository). Since this is for my personal XSSHunter setup, I am going to say no to email and slack notifications but yes to discord notifications.
To get your webhook from Discord, you need to have your own Discord server and channel. By clicking Edit Channel, you can make the discord channel private. That webhook URL will be used in the setup script.
Once your setup is complete, let’s get it up and running.
Before we get started, make sure that the domain you are using is pointing towards where you are hosting this, or you could have errors with the web certificate.
First, we are going to go into the directory cd xsshunter-express then docker compose up -d postgresdb Once the database is up we can start up the xsshunter.
After this next command the password will be printed when run for the first time and won’t be printed in the terminal again docker compose up xsshunterexpress
Please follow me on Twitter and Medium!
Digital Ocean: https://m.do.co/c/a165a29be76c
VPSCheap: https://crm.vpscheap.net/aff.php?aff=27
My Twitter: https://twitter.com/adamjsturge
If you enjoy reading stories like these and want to support me as a writer, consider signing up to become a Medium member. It’s $5 a month, giving you unlimited access to thousands of articles, including mine. If you sign up using my link, I’ll earn a small commission at no extra cost to you.
bez0x Jan 27, 2023 at 06:02 am
I’ve always been intimidated by the world of cybersecurity, but this article made it seem approachable and even fun. The XSSHunter alerts on Discord hack is something I never would have thought of, but it’s so obvious in hindsight.