Xss

RoboShadow OWASP ZAP Vulnerability Scanner

Web app & network vulnerability scanner integrating OWASP ZAP, Shodan & Nmap

XSS Polyglot Challenge

XSS Polyglot Challenge - XSS payload running in multiple contexts for testing XSS.

Ridge Security RidgeBot OWASP Compliance

Automated pentest tool validating web apps against OWASP Top 10 CWEs.

CyberChecker

Automated web vulnerability scanner with 60+ security checks

Acunetix Web Application & API Security

DAST scanner for web apps & APIs with automated vuln detection & remediation

SaltyCloud Dorkbot

Automated web vulnerability scanner for SQLi, XSS, and other web app flaws

Intruder PHP Vulnerability Scanner

DAST tool for scanning PHP web apps for vulnerabilities like SQL injection & XSS

Intruder Web Application Scanning

DAST tool for scanning web apps and APIs for OWASP Top 10 vulnerabilities

Trickest Vulnerability Scanning

Customizable vulnerability scanning platform for infrastructure and applications

Halo Security Application Scanning

DAST tool for detecting web app vulnerabilities like SQL injection and XSS

Imperva Web Application Firewall (WAF)

WAF protecting web apps and APIs from OWASP Top 10 and other threats

AppCheck SPA Scanner

DAST scanner for Single Page Applications using headless browser technology

Codeasily CVE-2022-0873 Scanner

Scanner for CVE-2022-0873 XSS vulnerability in WordPress Gmedia plugin

CVE-2024-35693 Scanner

Scanner for CVE-2024-35693 XSS vuln in WordPress 12 Step Meeting List plugin

EnProbe Cybersecurity

Cloud-based vulnerability assessment tool for web application security

Pentesting Payloads

A web-based payload repository that generates ready-to-use exploits for pentesting

Alibaba Cloud Web Application Firewall (WAF)

Cloud-based WAF providing web app, API, and bot protection for cloud services

Syhunt SyhuntAPI

API security testing tool for detecting vulnerabilities in web APIs

VulnSign Dynamic Application Security Testing

DAST tool for scanning web apps, microservices, and APIs for vulnerabilities

Node.js Goof

Node.js Goof is a vulnerable Node.js demo application containing multiple security vulnerabilities for testing and educational purposes.

xsshunter_client

A correlated injection proxy tool that integrates with XSS Hunter for automated cross-site scripting vulnerability testing and payload tracking.

BruteXSS

A tool to find XSS vulnerabilities in web applications

OWASP Joomla Vulnerability Scanner

A free and open-source tool for identifying vulnerabilities in Joomla-based websites.

XSSwagger

A specialized scanner that detects XSS vulnerabilities in older versions of Swagger-ui implementations.