xss-scanner

Most advanced XSS scanner.

🎯 Cross Site Scripting ( XSS ) Vulnerability Payload List

🌙🦊 DalFox is an powerful open source XSS scanning tool and parameter analyzer, utility

ezXSS is an easy way for penetration testers and bug bounty hunters to test (blind) Cross Site Scripting.

Advanced reconnaissance utility

ScanT3r - Module based Bug Bounty Automation Tool

PwnXSS: Vulnerability (XSS) scanner exploit

扫描器是来自GitHub平台的开源扫描器的集合，包括子域枚举、数据库漏洞扫描器、弱密码或信息泄漏扫描器、端口扫描器、指纹扫描器以及其他大规模扫描仪、模块扫描器等。对于其他著名的扫描工具，如：awvs、nmap，w3af将不包含在集合范围内。

A fast DOM based XSS vulnerability scanner with simplicity.

OWASP Xenotix XSS Exploit Framework is an advanced Cross Site Scripting (XSS) vulnerability detection and exploitation framework.

Xss Payload Generator ~ Xss Scanner ~ Xss Dork Finder

XSSMap 是一款基于 Python3 开发用于检测 XSS 漏洞的工具

Network, recon and offensive-security tool for Linux.

Intelligent XSS detection tool that uses human techniques for looking for reflected cross-site scripting (XSS) vulnerabilities

this is a python module that contains functions and classes which are used to test the security of web/network applications. it's coded on pure python and it's very intelligent tool ! It can easily detect: XSS (relected/stored), RCE (Remote Code/Command Execution), SSTI, SSRF, CORS Misconfigurations, File Upload, CSRF, Path Traversal,.... Also, it have DDoS capabilities, and variety of information gathering tools packed inside ! Aside of many other useful functionalities.

Chrome extension to aid in finding DOMXSS by simple taint analysis of string values.

Automated XSS Finder

XSSearch is a comprehensive reflected XSS tool built on selenium framework in python language. It contains more than 3000 payloads for automating XSS attacks and validating XSS endpoint

Godzilla is an automated scanner tool for bug hunters/pentesters that can scan website for vulnerabilities, Do Information gathering in Network range, exploit and attack network.

automatically crawl every URL and find cross site scripting (XSS)

XSSRecon - Reflected XSS Scanner

Not just another XSS tool

WebHook for Red Team

Following OWASP TOP 10 (the top ten most critical web application security risk) I decided to build an XSS Scanner.

Cross-Site Scripting (XSS) scanner. This tool helps to find possible XSS vulnerabilities. Cross platform - macOS, Linux, and Windows.

Automation of KNOXSS extension.

A simple script to detect unescaped characters in a web application for e.g. Cross Site Scripting (XSS) attacks.

Xssing is a simple semantic analysis based on the location of the vulnerability, to determine the existence of the vulnerability, and use chromium to verify that xss is existed.

Use this tool, to inspect postMessages between different tabs and popups. You can use this to find juicy XSS!

Web app able to find reflected XSS vulnerabilities through HTML forms