Femida is a Python automation tool that integrates with Burp Suite to detect blind XSS vulnerabilities in web applications through HTTP request analysis.
Checked October 2026.
Femida is a Python-based automation tool designed to identify blind XSS vulnerabilities in web applications. The tool integrates with Burp Suite as a proxy to intercept and analyze HTTP requests for potential blind cross-site scripting attack vectors.
The tool operates through command-line interface and focuses specifically on automating the detection process for blind XSS vulnerabilities, which are typically harder to identify through manual testing methods. Femida processes HTTP traffic captured through Burp Suite to systematically search for injection points where blind XSS payloads could be executed.
As an open-source tool available on GitHub, Femida can be installed using pip package manager. The tool is designed for security researchers and penetration testers who need to streamline their blind XSS vulnerability assessment workflows during web application security testing.
No core features are listed for this product yet, so check the vendor's documentation for the full feature list.
No integrations are listed for this product yet. Check the vendor's documentation, or ask the vendor which integrations and APIs it supports.
Common questions about Femida: features, pricing and alternatives.
Femida is a product in the Dynamic Application Security Testing category. It covers Open Source and XSS.
Femida is free. Download and setup instructions are at https://github.com/wish-i-was/femida/.
Alternatives to Femida listed on CybersecTools:
Compare all Femida alternatives at https://cybersectools.com/alternatives/femida
Femida is available as on-premises software. It is listed for startups, small businesses and mid-market companies. It is free.
Side by side: features, pricing model and the company behind each one.
AI-powered DAST tool for business logic security testing of web apps and APIs
GraphQL-native DAST tool for security testing GraphQL applications
EvoMaster is an AI-driven tool that automatically generates system-level test cases for web APIs and enterprise applications using evolutionary algorithms and dynamic program analysis.
A fast and simple DOM based XSS vulnerability scanner
DAST tool for continuous automated security testing of web and mobile apps
Black box fuzzer and DAST product for application security testing
On our shortlist?
Femida is not a pick on the current Best DAST Solutions for Business.
Mandos MCP: ask about all 9,030 products.
Connect your AI
