
A Burp Suite plugin that extracts keywords from HTTP responses using regex patterns and tests for reflected XSS vulnerabilities within the target scope.
Checked October 2026.
Rexsser is a Burp Suite plugin that automates the detection of reflected Cross-Site Scripting (XSS) vulnerabilities in web applications.
The plugin operates by extracting keywords from HTTP responses using regular expressions and then testing these keywords for reflected XSS within the defined target scope.
It integrates directly with Burp Suite's workflow, allowing security researchers and developers to identify potential XSS vulnerabilities during web application testing.
The tool focuses on reflected XSS detection by analyzing response content and testing for reflection patterns that could indicate security weaknesses.
Rexsser is distributed as an open-source project available through GitHub, making it accessible for security testing and vulnerability assessment activities.
No core features are listed for this product yet, so check the vendor's documentation for the full feature list.
No integrations are listed for this product yet. Check the vendor's documentation, or ask the vendor which integrations and APIs it supports.
Common questions about Rexsser: features, pricing and alternatives.
Rexsser is a product in the Dynamic Application Security Testing category. It covers Open Source, XSS and XSS Scanner.
Rexsser is free. Download and setup instructions are at https://github.com/profmoriarity/rexsser/.
Alternatives to Rexsser listed on CybersecTools:
Compare all Rexsser alternatives at https://cybersectools.com/alternatives/rexsser
Rexsser is available as on-premises software. It is listed for startups, small businesses, mid-market companies and enterprises. It is free.
Side by side: features, pricing model and the company behind each one.
Cloud-based DAST solution for web app & API security with AI-powered scanning
DAST product for automated web app and API vulnerability scanning and testing
Automated web vulnerability scanner for SQLi, XSS, and other web app flaws
DAST scanner for web apps and APIs with OWASP Top 10 vulnerability detection
DAST platform for web app & API vulnerability scanning with AI-enabled features
On our shortlist?
Rexsser is not a pick on the current Best DAST Solutions for Business.
Get a summary of this page from your assistant.
Mandos MCP: ask about all 9,030 products.
Connect your AI