Static DOM XSS Scanner is a Static Analysis tool written in python that will iterate through all the JavaScript and HTML files under the given directory and will list out all the possible sources and sinks that may cause DOM XSS. At the end of the scan, the tool will generate an HTML report.
☆119Mar 10, 2015Updated 11 years ago
Alternatives and similar repositories for Static-DOM-XSS-Scanner
Users that are interested in Static-DOM-XSS-Scanner are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- DOMXSS Scanner is an online tool to scan source code for DOM based XSS vulnerabilities☆193Jan 17, 2019Updated 7 years ago
- Automatically exported from code.google.com/p/ra2-dom-xss-scanner☆28Jan 4, 2016Updated 10 years ago
- MY XSS PLATFORM☆14Apr 18, 2013Updated 13 years ago
- Feigong，针对各种情况自由变化的mysql注入脚本,In view of the different things freely change the mysql injection script☆106Jan 24, 2017Updated 9 years ago
- Damn Small XSS Scanner☆428Oct 26, 2026Updated last week
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- XSS Tunnel is a standard HTTP proxy which sits on an attacker’s system. XSS Shell is a powerful XSS backdoor, in XSS Shell one can inter…☆88Jan 27, 2015Updated 11 years ago
- Enumerate subdomains through Virustotal☆32Nov 2, 2019Updated 7 years ago
- Reflective/DOM XSS scanner built on casperJS☆81Oct 21, 2014Updated 12 years ago
- ☆16Oct 23, 2015Updated 11 years ago
- ☆83Feb 3, 2017Updated 9 years ago
- Find sources and sinks in js code that could lead to DOM XSS 🔎💧🚰☆22Feb 27, 2024Updated 2 years ago
- a javascript static security analysis tool☆595May 5, 2015Updated 11 years ago
- Web Application Security related tools. Includes backdoors, proof of concepts and tricks☆37Oct 21, 2014Updated 12 years ago
- Automating SQL injection using Burp Proxy Logs and SQLMap☆27Jul 6, 2012Updated 14 years ago
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- ☆73Apr 18, 2013Updated 13 years ago
- OWASP Xenotix XSS Exploit Framework is an advanced Cross Site Scripting (XSS) vulnerability detection and exploitation framework.☆547Jun 7, 2020Updated 6 years ago
- Web Application Security☆133Jan 6, 2026Updated 9 months ago
- Broken Link Hijacking Burp Extension☆59Sep 13, 2019Updated 7 years ago
- A web vulnerability scanner framework☆138May 22, 2016Updated 10 years ago
- A burp extender that recalculate signature value automatically after you modified request parameter value.☆60Nov 10, 2022Updated 3 years ago
- 浏览器XSS 过滤器Fuzzing 框架 (browser xss aduit fuzzing framework )..☆15Sep 13, 2016Updated 10 years ago
- A php webshell run under linux based webservers. v0.05☆46Feb 17, 2015Updated 11 years ago
- A collection of curated Java Deserialization Exploits☆592May 16, 2021Updated 5 years ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- Burp Suite Extensions☆128Jul 23, 2013Updated 13 years ago
- Burp plugin to do random fuzzing of HTTP requests☆33Jan 31, 2017Updated 9 years ago
- Chrome extension that finds DOM based XSS vulnerabilities☆75Jun 3, 2025Updated last year
- This extension provides a central location for viewing all GraphQL requests/responses within a Burp project. It provides a clean UI that …☆16Feb 24, 2022Updated 4 years ago
- ☆78Oct 28, 2015Updated 11 years ago
- penetration testing framework that can use socks4/socks5 proxy.☆53Sep 6, 2014Updated 12 years ago
- An automated XSS payload generator written in python.☆313Jun 2, 2016Updated 10 years ago
- Proof of concept written in Python to show that in some situations a SSRF vulnerability can be used to steal NTLMv1/v2 hashes.☆57Dec 18, 2017Updated 8 years ago
- 目标端口扫描+系统服务指纹识别☆359Jan 13, 2017Updated 9 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- JavaScript Static Code Analysis☆25Jan 14, 2015Updated 11 years ago
- a tiny tool for swf hacking, just browse it:)☆243Mar 13, 2013Updated 13 years ago
- A C# web handler that is vulnerable to XXE with PoC. This is to serve as an example of what vulnerable C# code looks like.☆26Aug 10, 2013Updated 13 years ago
- Very loud vBulletin exploit☆14Aug 12, 2020Updated 6 years ago
- A Custom Scanner for Burp☆31Mar 26, 2014Updated 12 years ago
- Command line tool to search a local exploit-db repository☆13Sep 3, 2013Updated 13 years ago
- xss probe to steal page info: browser, ua, lang, referer, location, toplocation, cookie, domain, title, screen, flash, etc.☆230Dec 12, 2021Updated 4 years ago