NeXSS is a modern, self-hosted Blind XSS (Cross-Site Scripting) hunter and callback listener built with Next.js. It helps security researchers and penetration testers discover and validate blind XSS vulnerabilities by capturing detailed information when payloads execute on target systems.
☆35Jan 14, 2026Updated 9 months ago
Alternatives and similar repositories for nexss
Users that are interested in nexss are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Simple XSS vulnerability checker tool very useful with xsschecker.☆28Nov 21, 2025Updated 11 months ago
- Automated threat intelligence collector built with Python and GitHub Actions — fetches recent IOCs from open sources, normalizes and enri…☆16Updated this week
- A fast and efficient subdomain hijacking scanner that checks for takeover vulnerabilities by matching HTTP response bodies against predef…☆43Apr 12, 2026Updated 6 months ago
- AI exploit simulation and continuous security pipeline for LLM apps and AI agents☆16Mar 16, 2026Updated 7 months ago
- Go static taint-analysis engine that finds vulnerabilities in WordPress plugins — WordPress-aware (capability tiers, nonce≠authz, REST/AJ…☆22Jun 6, 2026Updated 5 months ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- gosqli is a fast and simple tool for detecting blind SQL injection vulnerabilities. It supports scanning URLs with custom payloads, paral…☆19Jun 22, 2026Updated 4 months ago
- HaXder is an advanced, asynchronous reconnaissance framework for security researchers. Discover subdomains, map attack surfaces, fingerpr…☆50Jul 1, 2026Updated 4 months ago
- Droid LLM Hunter is a tool to scan for vulnerabilities in Android applications using Large Language Models (LLMs).☆215Updated this week
- Burp plugin for jxscout☆26May 12, 2025Updated last year
- ☆11Jun 9, 2023Updated 3 years ago
- Open-source passive reconnaissance and exposure discovery tool that leverages VirusTotal and the Wayback Machine to uncover subdomains, U…☆147Sep 20, 2026Updated last month
- Collection of rules for Static Application Security Testing (SAST) with Semgrep☆13Apr 16, 2025Updated last year
- A powerful Burp Suite extension that automatically detects JavaScript URLs from HTTP traffic, scans them using TruffleHog for secrets det…☆30Oct 23, 2025Updated last year
- ☆74Jul 15, 2026Updated 3 months ago
- Virtual machines for every use case on DigitalOcean • AdGet dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
- An advanced Out-of-Band and In-Band SSRF fuzzing scanner with dynamic request tracking.☆39Jun 18, 2026Updated 4 months ago
- VulnerAppDLH is a vulnerable Android application specifically created to test Droid-LLM-Hunter. It serves as a comprehensive testbed for …☆14Jul 27, 2026Updated 3 months ago
- Multi-agent AI system using GPT-4o, DeepSeek v3, and Llama 3.3 to detect if CVE vulnerabilities were exploited as zero-days. Analyzes…☆21Feb 13, 2026Updated 8 months ago
- Give me your APK, I will give you framework name☆15May 6, 2026Updated 6 months ago
- Pure PowerShell port of PassTheCert tool to authenticate to an LDAP/S server with a certificate through Schannel☆66Apr 13, 2025Updated last year
- Subdosec is a fast, accurate subdomain takeover scanner with no false positives. It also offers a database of sites vulnerable to subdoma…☆63Aug 30, 2026Updated 2 months ago
- ✅ Experience the power of an automated Insecure Direct Object Reference (IDOR) vulnerability detection tool. Safeguard your applications …☆70Sep 4, 2026Updated 2 months ago
- Personalized Paper Recommender☆13Oct 9, 2025Updated last year
- Find XSS payloads that actually work by filtering them based on real-world constraints instead of blind payload spraying.☆290Aug 12, 2026Updated 2 months ago
- Serverless GPU API endpoints on Runpod - Get Bonus Credits • AdSkip the infrastructure headaches. Auto-scaling, pay-as-you-go, no-ops approach lets you focus on innovating your application.
- Lightweight reflection scanner☆20Aug 31, 2025Updated last year
- vulntechfinder is a powerful security tool that automates vulnerability scanning based on technology stack detection. It intelligently pr…☆20Aug 23, 2026Updated 2 months ago
- Wolfenstein 3-D: Alt-Right Edition.☆11Mar 1, 2021Updated 5 years ago
- SSLPinDetect is a tool for analyzing Android APKs to detect SSL pinning implementations by scanning for known patterns in decompiled code…☆88Sep 5, 2025Updated last year
- A tool for listing and extracting installed Android APKs and decrypted iOS IPAs (plus app storage) from rooted or jailbroken devices.☆38May 31, 2026Updated 5 months ago
- Crawl and analyze JavaScript for secrets, tokens, and API endpoints. A powerful bug bounty tool for automated JS analysis.☆29Aug 30, 2026Updated 2 months ago
- Echo Electronic Magazine (Issue 1 - 31)☆49Jun 11, 2017Updated 9 years ago
- A demo PHP application used to exercise SQL injection techniques in a safe, local Docker environment☆45Jun 3, 2024Updated 2 years ago
- ✨ Open-source AI hackers for your apps 👨🏻💻☆35Sep 9, 2025Updated last year
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- A basic Android background service that connects to a remote server, executes commands, and returns encrypted output. Disguised as a syst…☆29Aug 2, 2025Updated last year
- ☆31Jan 19, 2026Updated 9 months ago
- ☆61Jul 15, 2026Updated 3 months ago
- ☆18Oct 3, 2026Updated last month
- WayAI — Wayback & Common Crawl Recon (CLI + Web GUI)☆13Dec 28, 2025Updated 10 months ago
- A lightweight Python tool to analyze PCAP files and generate network traffic reports. It detects traffic patterns, security concerns, and…☆19Sep 25, 2024Updated 2 years ago
- Find open storage buckets and accessible files across Amazon Web Services, Google Cloud, Microsoft Azure, and Digital Ocean simultaneousl…☆20Jan 15, 2025Updated last year