How this analysis was created: This summary and feature list are AI-generated from collected project material and can contain mistakes. Stars, license and language are imported from GitHub. Inclusion does not mean that we have tested or audited this project. Check the source documentation for any feature you depend on. Learn more on our About page.
一个Burpsuite插件，用于检测隐藏的XSS，需要安装Jython环境：https://blog.csdn.net/sinat_25449961/article/details/77374407
The main features of hpd0ger/supertags are: XSS Vulnerability Tools.
Projects with overlapping indexed features include: ultimatehackers/xsstrike — XSStrike is a security tool designed to detect cross-site scripting vulnerabilities through parameter fuzzing and web… hahwul/dalfox — Dalfox is an automated web application security tool specifically designed for discovering and verifying cross-site… conanjun/xssblindinjector — burp插件，实现自动化xss盲打以及xss log. elkokc/reflector — Burp plugin able to find reflected XSS on page in real-time while browsing on site. jiangsir404/xss-sql-fuzz — burpsuite 插件对GP所有参数(过滤特殊参数)一键自动添加xss sql payload 进行fuzz. mystech7/burp-hunter — XSS Hunter Burp Plugin.
XSStrike is a security tool designed to detect cross-site scripting vulnerabilities through parameter fuzzing and web response analysis. It functions as a web application fuzzer and vulnerability scanner that identifies injection points and security flaws. The project includes a specialized utility for detecting blind XSS, where payloads execute asynchronously or on separate pages. It also features a JavaScript library auditor to identify outdated libraries with known vulnerabilities and a dedicated tool for identifying and bypassing web application firewalls using various evasion techniques.
Dalfox is an automated web application security tool specifically designed for discovering and verifying cross-site scripting vulnerabilities. It functions as an XSS vulnerability scanner that analyzes HTTP parameters and DOM structures to identify reflected, stored, and blind injection points. The project distinguishes itself by providing a Model Context Protocol server and a REST API, allowing artificial intelligence agents and remote interfaces to trigger and manage security scans programmatically. It utilizes a payload mutation engine and fingerprinting strategies to execute WAF evasion t
Burp plugin able to find reflected XSS on page in real-time while browsing on site
