30 open-source projects similar to jiangsir404/xss-sql-fuzz, ranked by shared indexed features. Tags may describe platforms or build tools rather than the same primary purpose. Check each project’s use case, license, and deployment requirements before treating it as a replacement.
Dalfox is an automated web application security tool specifically designed for discovering and verifying cross-site scripting vulnerabilities. It functions as an XSS vulnerability scanner that analyzes HTTP parameters and DOM structures to identify reflected, stored, and blind injection points. The project distinguishes itself by providing a Model Context Protocol server and a REST API, allowing artificial intelligence agents and remote interfaces to trigger and manage security scans programmatically. It utilizes a payload mutation engine and fingerprinting strategies to execute WAF evasion t
BurpSuite extension to inject custom cross-site scripting payloads on every form/request submitted to detect blind XSS vulnerabilities
This is a burp intruder extender that is designed for automation and validation of XSS vulnerabilities.
XSStrike is a security tool designed to detect cross-site scripting vulnerabilities through parameter fuzzing and web response analysis. It functions as a web application fuzzer and vulnerability scanner that identifies injection points and security flaws. The project includes a specialized utility for detecting blind XSS, where payloads execute asynchronously or on separate pages. It also features a JavaScript library auditor to identify outdated libraries with known vulnerabilities and a dedicated tool for identifying and bypassing web application firewalls using various evasion techniques.
XSS spider - 66/66 wavsep XSS detected
A fast DOM based XSS vulnerability scanner with simplicity.
Maintaining account persistence via XSS and Oauth
Burp plugin able to find reflected XSS on page in real-time while browsing on site
Cross Site "Scripter" (aka XSSer) is an automatic -framework- to detect, exploit and report XSS vulnerabilities in web-based applications.
A simple random HTTP fuzzer. This plugin adds ActiveScan checks that fuzz the HTTP request. Using this fuzzer with any standard HTTP server (Apache, Nginx, etc.) is usually useless, but can be fun. It can be used to see the different error conditions a server and the web application code can run…
Quickly test various encoding for a given value in Burp Intruder
This extension generates scripts to reissue a selected request. The scripts can be run outside of Burp. It can be useful to script attacks such as second order SQL injection, padding oracle, fuzzing encoded value, etc.
🔱 Powerfull XSS Scanning and Parameter analysis tool&gem
XSS payloads designed to turn alert(1) into P1
Detect, manage and exploit Blind Cross-site scripting (XSS) vulnerabilities.
一个Burpsuite插件,用于检测隐藏的XSS,需要安装Jython环境:https://blog.csdn.net/sinat_25449961/article/details/77374407
Advance of fuzzing for Web pentest. Based on Burp extension, send HTTP request template out to Python fuzzer.
bXSS is a utility which can be used by bug hunters and organizations to identify Blind Cross-Site Scripting.
The XSS Hunter service - a portable version of XSSHunter.com
BurpSuite's payload-generation extension aiming at applying fuzzed test-cases depending on the type of payload (integer, string, path; JSON; XML; GWT; binary) and following encoding-scheme applied originally.
Burp Suite plugin which implement PyJFuzz for fuzzing web application.