How this analysis was created: This summary and feature list were written by an AI model that read the project's README and public documentation pages. Each feature links to the documentation it came from; stars, license and language come straight from the GitHub API. The model does not read the source code, and the analysis is refreshed when the project is re-analysed. Learn more on our About page.
XSStrike is a security tool designed to detect cross-site scripting vulnerabilities through parameter fuzzing and web response analysis. It functions as a web application fuzzer and vulnerability scanner that identifies injection points and security flaws. The project includes a specialized utility for detecting blind XSS, where payloads execute asynchronously or on separate pages. It also features a JavaScript library auditor to identify outdated libraries with known vulnerabilities and a dedicated tool for identifying and bypassing web application firewalls using various evasion techniques.
Dalfox is an automated web application security tool specifically designed for discovering and verifying cross-site scripting vulnerabilities. It functions as an XSS vulnerability scanner that analyzes HTTP parameters and DOM structures to identify reflected, stored, and blind injection points. The project distinguishes itself by providing a Model Context Protocol server and a REST API, allowing artificial intelligence agents and remote interfaces to trigger and manage security scans programmatically. It utilizes a payload mutation engine and fingerprinting strategies to execute WAF evasion t
Burp plugin able to find reflected XSS on page in real-time while browsing on site
This is a burp intruder extender that is designed for automation and validation of XSS vulnerabilities.
The main features of portswigger/xss-validator are: XSS Vulnerability Tools.
Open-source alternatives to portswigger/xss-validator include: ultimatehackers/xsstrike — XSStrike is a security tool designed to detect cross-site scripting vulnerabilities through parameter fuzzing and web… hahwul/dalfox — Dalfox is an automated web application security tool specifically designed for discovering and verifying cross-site… conanjun/xssblindinjector — burp插件，实现自动化xss盲打以及xss log. elkokc/reflector — Burp plugin able to find reflected XSS on page in real-time while browsing on site. hpd0ger/supertags — 一个Burpsuite插件，用于检测隐藏的XSS，需要安装Jython环境：https://blog.csdn.net/sinat_25449961/article/details/77374407. jiangsir404/xss-sql-fuzz — burpsuite 插件对GP所有参数(过滤特殊参数)一键自动添加xss sql payload 进行fuzz.
