How to disable XSS auditor in chrome v60 (09/2017)?

Question

I was reading about PHP_SELF XSS vulnerability and I wanted to test it in chrome v60, I tried to disable the XSS auditor with :

$ chrome.exe --args --disable-web-security  
$ chrome.exe --disable-web-security  
$ chrome.exe --disable-xss-auditor  
$ chrome.exe --disable-xss-auditor --enable-devtools-experiments --disable-features=enable-automatic-password-saving

but nothing worked, can you tell me how to properly disable it ?

Answer 1

This one (that you already tried) should work:

chrome.exe --disable-xss-auditor

You just need to make sure that all instances of Chrome have been killed before you run that command.

Answer 2

I haven't still tried that out because Firefox works best for me while testing for XSS. In case you really need to bypass the chrome auditor, here is a great article you should check and hope that helps you.:)

Brutelogic chrome XSS bypass