XSSMap 是一款基于 Python3 开发用于检测 XSS 漏洞的工具
☆269Aug 20, 2020Updated 6 years ago
Alternatives and similar repositories for xssmap
Users that are interested in xssmap are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- A fast DOM based XSS vulnerability scanner with simplicity.☆867Sep 30, 2022Updated 4 years ago
- This is a burp plugin that extracts keywords from response using regexes and test for reflected XSS on the target scope.☆75Nov 5, 2020Updated 5 years ago
- A fast tool to scan CRLF vulnerability written in Go☆1,576Oct 13, 2026Updated 2 weeks ago
- An automated SSRF finder. Just give the domain name and your server and chill! ;) Also has options to find XSS and open redirects☆965Dec 8, 2021Updated 4 years ago
- Quick SQLMap Tamper Suggester☆1,409Jul 18, 2022Updated 4 years ago
- Proton VPN Special Offer - Get 70% off • AdSpecial partner offer. Trusted by over 100 million users worldwide. Tested, Approved and Recommended by Experts.
- XRCross is a Reconstruction, Scanner, and a tool for penetration / BugBounty testing. This tool was built to test (XSS|SSRF|CORS|SSTI|ID…☆346Jun 17, 2023Updated 3 years ago
- Blind XSS Scanner is a tool that can be used to scan for blind XSS vulnerabilities in web applications.☆419May 28, 2025Updated last year
- 🔱 Powerfull XSS Scanning and Parameter analysis tool&gem☆1,357Mar 3, 2026Updated 7 months ago
- ☆143Jul 25, 2022Updated 4 years ago
- Automation for javascript recon in bug bounty.☆1,112Sep 9, 2023Updated 3 years ago
- An automation tool that scans sub-domains, sub-domain takeover, then filters out XSS, SSTI, SSRF, and more injection point parameters and…☆810May 11, 2026Updated 5 months ago
- Python tool that probes websites for open redirection via headers, JavaScript, and meta-tag refresh, pulls candidate URLs from the Waybac…☆832Sep 28, 2026Updated last month
- Passively check for XSS character encodings☆20Mar 9, 2026Updated 7 months ago
- Xss Payload Generator ~ Xss Scanner ~ Xss Dork Finder☆624May 2, 2026Updated 6 months ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- ezXSS is an easy way for penetration testers and bug bounty hunters to test (blind) Cross Site Scripting.☆2,352Jul 8, 2026Updated 3 months ago
- ☆183Nov 19, 2023Updated 2 years ago
- Cross-Site Scripting (XSS) is one of the most well known web application vulnerabilities. It even has a dedicated chapter in the OWASP To…☆12Jan 30, 2023Updated 3 years ago
- a javascript change monitoring tool for bugbounties☆734Jul 31, 2024Updated 2 years ago
- Web Application Security Automation Framework which recons the target for various assets to maximize the attack surface for security prof…☆408Nov 24, 2020Updated 5 years ago
- i will upload more templates here to share with the comunity.☆574Apr 17, 2024Updated 2 years ago
- Automatic SSRF fuzzer and exploitation tool☆3,644Aug 10, 2026Updated 2 months ago
- Python library and CLI for the Bug Bounty Recon API☆227Jul 3, 2026Updated 3 months ago
- Secret and/or credential patterns used for gf.☆245Feb 10, 2023Updated 3 years ago
- End-to-end encrypted email - Proton Mail • AdSpecial offer: 40% Off Yearly / 80% Off First Month. All Proton services are open source and independently audited for security.
- Signatures for jaeles scanner by @j3ssie☆115Apr 20, 2024Updated 2 years ago
- Heuristic Vulnerable Parameter Scanner☆602Jan 8, 2024Updated 2 years ago
- The format of various s3 buckets is convert in one format. for bugbounty and security testing.☆92May 6, 2023Updated 3 years ago
- A tool to check a bunch of URLs that contain reflecting params.☆598Aug 4, 2024Updated 2 years ago
- File Inclusion & Directory Traversal fuzzing, enumeration & exploitation tool.☆274Mar 24, 2021Updated 5 years ago
- Host Header Injection Checker☆86Mar 2, 2022Updated 4 years ago
- Simple python script to check against hypothetical JWT vulnerability.☆51Nov 29, 2020Updated 5 years ago
- Hacked together script for feeding urls into Burp's Sitemap☆95Jul 30, 2026Updated 3 months ago
- XSScope is one of the most powerful and advanced GUI Framework for Modern Browser exploitation via XSS.☆313Jun 1, 2022Updated 4 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- FockCache - Minimalized Test Cache Poisoning☆111Feb 3, 2020Updated 6 years ago
- Toolkit to detect and keep track on Blind XSS, XXE & SSRF☆342Aug 23, 2019Updated 7 years ago
- Fast CLI tool to find the parameters that can be used to find SSRF or Out-of-band resource load☆295Sep 22, 2024Updated 2 years ago
- Electron JS Browser To Find XSS Vulnerabilities Automatically☆747Mar 30, 2021Updated 5 years ago
- Faster xss scanner,support reflected-xss and dom-xss☆436Sep 25, 2023Updated 3 years ago
- The Swiss Army knife for automated Web Application Testing☆2,384Jun 20, 2026Updated 4 months ago
- Gotator is a tool to generate DNS wordlists through permutations.☆540Jul 17, 2022Updated 4 years ago