Most advanced XSS scanner.

🎯 Cross Site Scripting ( XSS ) Vulnerability Payload List

ezXSS is an easy way for penetration testers and bug bounty hunters to test (blind) Cross Site Scripting.

Advanced reconnaissance utility

🌘🦊 DalFox(Finder Of XSS) / Parameter Analysis and XSS Scanning tool based on golang

OWASP Xenotix XSS Exploit Framework is an advanced Cross Site Scripting (XSS) vulnerability detection and exploitation framework.

扫描器是来自GitHub平台的开源扫描器的集合，包括子域枚举、数据库漏洞扫描器、弱密码或信息泄漏扫描器、端口扫描器、指纹扫描器以及其他大规模扫描仪、模块扫描器等。对于其他著名的扫描工具，如：awvs、nmap，w3af将不包含在集合范围内。

A fast DOM based XSS vulnerability scanner with simplicity.

Xss Payload Generator ~ Xss Scanner ~ Xss Dork Finder

XSSMap 是一款基于 Python3 开发用于检测 XSS 漏洞的工具

XRCross is a Reconstruction, Scanner, and a tool for penetration / BugBounty testing. This tool was built to test (XSS|SSRF|CORS|SSTI|IDOR|RCE|LFI|SQLI) vulnerabilities

PwnXSS: Vulnerability (XSS) scanner exploit

Chrome extension to aid in finding DOMXSS by simple taint analysis of string values.

Intelligent XSS detection tool that uses human techniques for looking for reflected cross-site scripting (XSS) vulnerabilities

Automated XSS Finder

Godzilla is an automated scanner tool for bug hunters/pentesters that can scan website for vulnerabilities, Do Information gathering in Network range, exploit and attack network.

Not just another XSS tool

XSSRecon - Reflected XSS Scanner

Cross-Site Scripting (XSS) scanner. This tool helps to find possible XSS vulnerabilities. Cross platform - macOS, Linux, and Windows.

Automation of KNOXSS extension.

Following OWASP TOP 10 (the top ten most critical web application security risk) I decided to build an XSS Scanner.

Xssing is a simple semantic analysis based on the location of the vulnerability, to determine the existence of the vulnerability, and use chromium to verify that xss is existed.

A simple script to detect unescaped characters in a web application for e.g. Cross Site Scripting (XSS) attacks.

Use this tool, to inspect postMessages between different tabs and popups. You can use this to find juicy XSS!

Web app able to find reflected XSS vulnerabilities through HTML forms

Web Application Penetration Testing tools and Materials for Ethical Hackers.

Web fuzzer with a GUI

Advanced XSS Detection Suite - Docker image (Multiarch)