NeXSS is a modern, self-hosted Blind XSS (Cross-Site Scripting) hunter and callback listener built with Next.js. It helps security researchers and penetration testers discover and validate blind XSS vulnerabilities by capturing detailed information when payloads execute on target systems.
☆35Jan 14, 2026Updated 9 months ago
Alternatives and similar repositories for nexss
Users that are interested in nexss are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Simple XSS vulnerability checker tool very useful with xsschecker.☆28Nov 21, 2025Updated 10 months ago
- DursGo - The Go-Powered Web Application Scanner - With AI-Powered Analysis☆74Apr 21, 2026Updated 5 months ago
- Open-source stealer logs parser and visualization dashboard that structures and presents log data to facilitate analysis.☆101Jun 18, 2026Updated 4 months ago
- Go static taint-analysis engine that finds vulnerabilities in WordPress plugins — WordPress-aware (capability tiers, nonce≠authz, REST/AJ…☆21Jun 6, 2026Updated 4 months ago
- AI exploit simulation and continuous security pipeline for LLM apps and AI agents☆16Mar 16, 2026Updated 7 months ago
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- gosqli is a fast and simple tool for detecting blind SQL injection vulnerabilities. It supports scanning URLs with custom payloads, paral…☆19Jun 22, 2026Updated 3 months ago
- A fast and efficient subdomain hijacking scanner that checks for takeover vulnerabilities by matching HTTP response bodies against predef…☆44Apr 12, 2026Updated 6 months ago
- Burp plugin for jxscout☆25May 12, 2025Updated last year
- miscellaneous sploit scripts/hacks☆17Feb 3, 2025Updated last year
- Collection of rules for Static Application Security Testing (SAST) with Semgrep☆13Apr 16, 2025Updated last year
- Open-source passive reconnaissance and exposure discovery tool that leverages VirusTotal and the Wayback Machine to uncover subdomains, U…☆145Sep 20, 2026Updated 3 weeks ago
- ☆11Jun 9, 2023Updated 3 years ago
- An advanced Out-of-Band and In-Band SSRF fuzzing scanner with dynamic request tracking.☆40Jun 18, 2026Updated 4 months ago
- A powerful Burp Suite extension that automatically detects JavaScript URLs from HTTP traffic, scans them using TruffleHog for secrets det…☆31Oct 23, 2025Updated 11 months ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Droid LLM Hunter is a tool to scan for vulnerabilities in Android applications using Large Language Models (LLMs).☆205Aug 31, 2026Updated last month
- ParamScan is a chrome extension for finding reflected parameters in a webpage.☆92Jan 11, 2025Updated last year
- Multi-agent AI system using GPT-4o, DeepSeek v3, and Llama 3.3 to detect if CVE vulnerabilities were exploited as zero-days. Analyzes…☆21Feb 13, 2026Updated 8 months ago
- xsschecker tests endpoints for reflected XSS by injecting payloads and checking responses. It prints vulnerable if the payload is reflect…☆38Nov 3, 2025Updated 11 months ago
- Find XSS payloads that actually work by filtering them based on real-world constraints instead of blind payload spraying.☆289Aug 12, 2026Updated 2 months ago
- Lightweight reflection scanner☆20Aug 31, 2025Updated last year
- Pure PowerShell port of PassTheCert tool to authenticate to an LDAP/S server with a certificate through Schannel☆64Apr 13, 2025Updated last year
- vulntechfinder is a powerful security tool that automates vulnerability scanning based on technology stack detection. It intelligently pr…☆20Aug 23, 2026Updated last month
- HaXder is an advanced, asynchronous reconnaissance framework for security researchers. Discover subdomains, map attack surfaces, fingerpr…☆50Jul 1, 2026Updated 3 months ago
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- ✅ Experience the power of an automated Insecure Direct Object Reference (IDOR) vulnerability detection tool. Safeguard your applications …☆71Sep 4, 2026Updated last month
- Echo Electronic Magazine (Issue 1 - 31)☆52Jun 11, 2017Updated 9 years ago
- A fake DNS server for malware analysis written in Python3☆10Aug 14, 2022Updated 4 years ago
- An agent that can help triage vulnerabilities across multiple codebases☆19Mar 14, 2026Updated 7 months ago
- Give me your APK, I will give you framework name☆15May 6, 2026Updated 5 months ago
- A tool for listing and extracting installed Android APKs and decrypted iOS IPAs (plus app storage) from rooted or jailbroken devices.☆37May 31, 2026Updated 4 months ago
- ✨ Open-source AI hackers for your apps 👨🏻💻☆34Sep 9, 2025Updated last year
- ☆31Jan 19, 2026Updated 8 months ago
- SSLPinDetect is a tool for analyzing Android APKs to detect SSL pinning implementations by scanning for known patterns in decompiled code…☆88Sep 5, 2025Updated last year
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- A basic Android background service that connects to a remote server, executes commands, and returns encrypted output. Disguised as a syst…☆29Aug 2, 2025Updated last year
- A demo PHP application used to exercise SQL injection techniques in a safe, local Docker environment☆46Jun 3, 2024Updated 2 years ago
- Official API Documentation☆34Sep 10, 2026Updated last month
- GarudRecon automates domain recon with top open-source tools to discover assets, enumerate subdomains, and detect XSS, SQLi, LFI, RCE & m…☆272Mar 28, 2026Updated 6 months ago
- URILoot is a browser extension designed for Bug Bounty Hunters and Pentesters. Makes fetching uris easy from various sources.☆64Feb 15, 2026Updated 8 months ago
- 必应每日壁纸数据采集脚本、必应壁纸历史数据API和必应壁纸在线浏览。☆10Dec 31, 2020Updated 5 years ago
- Find open storage buckets and accessible files across Amazon Web Services, Google Cloud, Microsoft Azure, and Digital Ocean simultaneousl…☆20Jan 15, 2025Updated last year