Open-source alternatives to Xssmap

A fast DOM based XSS vulnerability scanner with simplicity.

Maintaining account persistence via XSS and Oauth

Cross Site "Scripter" (aka XSSer) is an automatic -framework- to detect, exploit and report XSS vulnerabilities in web-based applications.

XSS'OR - Hack with JavaScript.

DOM XSS scanner for Single Page Applications

Dalfox is an automated web application security tool specifically designed for discovering and verifying cross-site scripting vulnerabilities. It functions as an XSS vulnerability scanner that analyzes HTTP parameters and DOM structures to identify reflected, stored, and blind injection points. The project distinguishes itself by providing a Model Context Protocol server and a REST API, allowing artificial intelligence agents and remote interfaces to trigger and manage security scans programmatically. It utilizes a payload mutation engine and fingerprinting strategies to execute WAF evasion t

🔱 Powerfull XSS Scanning and Parameter analysis tool&gem

XSS payloads designed to turn alert(1) into P1

Detect, manage and exploit Blind Cross-site scripting (XSS) vulnerabilities.

burpsuite 插件对GP所有参数(过滤特殊参数)一键自动添加xss sql payload 进行fuzz

bXSS is a utility which can be used by bug hunters and organizations to identify Blind Cross-Site Scripting.

The XSS Hunter service - a portable version of XSSHunter.com

XSSCon: Simple XSS Scanner tool

Sleepy Puppy XSS Payload Management Framework

This is a burp intruder extender that is designed for automation and validation of XSS vulnerabilities.

This is a burp plugin that extracts keywords from response using regexes and test for reflected XSS on the target scope.

BruteXSS is a tool written in python simply to find XSS vulnerabilities in web application. This tool was originally developed by Shawar Khan in CLI. I just redesigned it and made it GUI for more convienience.

XSStrike is an automated security scanning engine designed for web application discovery, input

Shadow Workers is a free and open source C2 and proxy designed for penetration testers to help in the exploitation of XSS and malicious Service Workers (SW)

PNG IDAT chunks XSS payload generator