← All tools

XSStrike

https://github.com/s0md3v/XSStrike

Open Source

Categories

Web Application

Description

Advanced XSS detection and exploitation suite. Features a crawler, fuzzer, a context-aware analysis engine, and a payload generator that crafts payloads based on the reflected context.

Keywords

XSS cross-site scripting payload context analysis crawler fuzzer reflected stored DOM

Example Usage

python3 xsstrike.py -u "https://example.com/page?q=test"
python3 xsstrike.py -u "https://example.com" --crawl -l 3

See also

Retire.js

Open Source

Detects the use of JavaScript libraries with known vulnerabilities. Available as a CLI tool, browser…

GraphQL Voyager / InQL

Open Source

InQL is a Burp Suite and standalone GraphQL security scanner. Analyzes introspection queries, genera…

API-Pentesting-Tools

Open Source

API Pentesting Tools are specialized security tools used to test and analyze the security of Applica…

SQLiDetector

Free

Simple python script supported with BurpBouty profile that helps you to detect SQL injection "Error …

JWT_Tool

Open Source

Toolkit for testing, tampering, and forging JSON Web Tokens. Tests common JWT vulnerabilities includ…

devguard

Free

DevGuard Backend - Secure your Software Supply Chain - Attestation-based compliance as Code, manage …