Automated blind-xss search for Burp Suite Femida is a tool that helps you find blind XSS vulnerabilities in your web application. It uses Burp Suite as a proxy to intercept and analyze HTTP requests. Femida is a Python script that can be run from the command line. It's a great tool for security researchers and penetration testers who want to automate their blind XSS searches. Femida is open-source and free to use. It's available on GitHub and can be easily installed using pip.
FEATURES
SIMILAR TOOLS
Falcon Sandbox is a malware analysis framework that provides in-depth static and dynamic analysis of files, offering hybrid analysis, behavior indicators, and integrations with various security tools.
Blazingly fast Yara queries for malware analysts with an analyst-friendly web GUI.
A binary analysis and management framework for organizing and analyzing malware and exploit samples, and creating plugins.
Intezer is a cloud-based malware analysis platform that detects and classifies malware using genetic code analysis.
A collaborative malware analysis framework with various features for automated analysis tasks.
PinCTF is a tool for using Intel's Pin Tool to instrument reverse engineering binaries and count instructions.
A static analysis tool for PE files that detects malicious behavior and provides information for manual analysis.
PINNED

Checkmarx SCA
A software composition analysis tool that identifies vulnerabilities, malicious code, and license risks in open source dependencies throughout the software development lifecycle.

Orca Security
A cloud-native application protection platform that provides agentless security monitoring, vulnerability management, and compliance capabilities across multi-cloud environments.

DryRun
A GitHub application that performs automated security code reviews by analyzing contextual security aspects of code changes during pull requests.