pythoncode-tutorials

Python Code Tutorials This is a repository of all the tutorials of The Python Code website. List of Tutorials Ethical Hacking Scapy Getting Started With Scapy: Python Network Manipulation Tool Building an ARP Spoofer. code Detecting ARP Spoof attacks. code How to Make a DHCP Listener using Scapy ...

domdig

DOMDig DOMDig is a DOM XSS scanner that runs inside the Chromium web browser and it can scan single page applications SPA recursively. Unlike other scanners, DOMDig can crawl any webapplication including gmail by keeping track of DOM modifications and XHR/fetch/websocket requests and it can...

Pybelt

NOTE: This project is no longer updated, this will be the last push to this project, if you would like more info, feel free to ping me on Twitter: @staysalty Pybelt Pybelt is an open source hackers tool belt complete with: A port scanner SQL injection scanner Dork checker Hash cracker Hash type...

XSSCon

A powerful XSS scanner made in python 3.7 Installing Requirements: BeautifulSoup4 root@kitploit: pip install bs4 requests root@kitploit: pip install requests python 3.7 Commands: root@kitploit: git clone https://github.com/menkrep1337/XSSCon chmod 755 -R XSSCon cd XSSCon python3 xsscon.py --help...

burpfox

🦊 BurpFox A Burp Suite extension that integrates Dalfox XSS scanner directly into your workflow. Features 🎯 Right-click scanning - Scan requests directly from Proxy History or Repeater. ⚙️ Full Dalfox options - Context-aware, WAF evasion, Blind XSS and more. Prerequisites 1. Install Dalfox...

sslscan

sslscan2 sslscan version 2 has now been released. This includes a major rewrite of the backend scanning code, which means that it is no longer reliant on the version of OpenSSL for many checks. This means that it is possible to support legacy protocols SSLv2 and SSLv3, as well as supporting TLSv1...

traxss

Traxss Automated Vulnerability Scanner for XSS | Written in Python3 | Utilizes Selenium Headless Forks DEMO Background Traxss is a Hacktoberfest Project! If you are looking for a place to make contribute, please feel free. Traxss is an automated framework to scan URLs and webpages for XSS...

NoXss

NoXss NoXss is a cross-site script vulnerability scanner supported reflected xss and dom-based xss. It's very fast and suitable for testing millions of urls. It has found some xss vulnerabilities in Bug Bounty program. Features Fast and suitable for testing millions of urls Support Dom-based xssu...

DSXS

Damn Small XSS Scanner Damn Small XSS Scanner DSXS is a fully functional Cross-site scripting vulnerability scanner supporting GET and POST parameters written in under 100 lines of code. As of optional settings it supports HTTP proxy together with HTTP header values User-Agent, Referer and Cookie...

GETROBARB

GETROBARB XSS Scanner 是一个用 Bash 编写的自动化 XSS（跨站脚本攻击）漏洞识别与检测框架，专为授权的 Web 安全审计而设计。它整合了多个 bug bounty 和渗透测试生态中流行的工具，以自动化整个易受攻击端点发现流程。 工具描述：GETROBARB XSS Scanner GETROBARB XSS Scanner 框架是一款自动化 XSS 识别与扫描工具，结合多种进攻性安全工具，用于识别 Web 应用中潜在的跨站脚本（XSS）漏洞。 该框架面向渗透测试人员、安全研究人员和 bug bounty 猎人，允许从单一接口执行完整的子域名发现、URL...

XSS-LOADER

💎 XSS-LOADER TOOLS 💎 Written by TMRSWRR Version 1.0.0 All in one tools for XSS PAYLOAD GENERATOR -XSS SCANNER-XSS DORK FINDER Instagram: TMRSWRR 📷 Screenshots 📷...

burp-dom-scanner

Burp DOM Scanner It's a Burp Suite's extension to allow for recursive crawling and scanning of Single Page Applications. It runs a Chromium browser to scan the webpage for DOM-based XSS. It can also collect all the requests XHR, fetch, websockets, etc issued during the crawling allowing them to b...

dalfox

正在寻找 Go（v2.x）版本？ Dalfox v3 是使用 Rust 完全重写的版本。Go 代码库保留在 v2 分支 上，并持续接收安全补丁。请参阅 SECURITY.md 了解支持策略，以及迁移指南了解 v3 中的变更内容。 Dalfox 是一款功能强大的开源工具，专注于自动化，非常适合快速扫描 XSS 漏洞和分析参数。其先进的测试引擎和特色功能旨在简化漏洞检测与验证的流程。 主要特性 子命令：scan（URL / 文件 / 管道 / 原始 HTTP，自动检测）、server、、...

PwnXSS

A powerful XSS scanner made in python 3.7 Installing Requirements: BeautifulSoup4 root@kitploit: pip install bs4 requests root@kitploit: pip install requests python 3.7 Commands: root@kitploit: git clone https://github.com/pwn0sec/PwnXSS chmod 755 -R PwnXSS cd PwnXSS python3 pwnxss.py --help Usag...

XSSYA

XSSYA-V2.0 已发布 - 查看 https://github.com/yehia-mamdouh/XSSYA-V-2.0 XSSYA 是一款跨站脚本扫描器与漏洞确认工具（支持两种方法） • 方法一：通过请求和响应进行确认 • 方法二：执行编码后的载荷，并在网页 HTML 代码中搜索解码后的相同载荷 • 支持 HTTPS • 确认后可执行载荷以获取 Cookie • 识别 3 种 WAF（ModSecurity - WebKnight - F5 BIG IP） • 可在（Windows - Linux）上运行 XSSYA 拥有持续更新的编码载荷库，用于绕过 WAF（Web 应用防火...

XSS-Scanner

XSS Scanner Cross-Site Scripting XSS is one of the most well known web application vulnerabilities. It even has a dedicated chapter in the OWASP Top 10 project and it is a highly chased vulnerability in bug bounty programs. The scanner gets a link from the user and scan the website for XSS...

XSpear

XSpear XSpear is XSS Scanner on ruby gems !IMPORTANT XSpear Repository Archived This repository has been archived and is now read-only. XSpear is no longer actively maintained. Try Dalfox instead 🌙🦊 A faster, more powerful XSS scanner with advanced features. → https://github.com/hahwul/dalfox Key...

bxss

Bxss - 盲 XSS 扫描器 🚀 描述 Bxss 是一款高性能的盲 XSS 扫描器，可自动检测 Web 应用程序中的盲 XSS 漏洞。 ✨ 功能 将盲 XSS 有效载荷注入自定义头与参数 支持多种 HTTP 方法（PUT、POST、GET、OPTIONS） 支持并发的高速扫描 易与其他工具链式使用 安装与使用简单 🧠 开发中 我们正积极整合一个 Chromium 工作池 ，以提升 bxss 在 低端设备 上的性能。 该功能将允许将资源密集型任务（如基于 DOM 的 XSS 检测或触发后负载检查）卸载到通过池管理的轻量级 Chromium...

EUVD-2026-32615

Dalfox is a powerful open-source XSS scanner and utility focused on automation. Prior to 2.13.0, when dalfox is started in REST API server mode dalfox server, the server binds to 0.0.0.0:6664 by default and requires no API key unless the operator explicitly passes --api-key. Because model.Options...

CVE-2026-45090

Dalfox is a powerful open-source XSS scanner and utility focused on automation. Prior to 2.13.0, ParameterAnalysis in pkg/scanning/parameterAnalysis.go runs two sequential worker stages that both write to the same results channel. The channel is correctly closed after the first stage completes...