XSSCon
XSSCon: Simple XSS Scanner tool XSSCon is a simple XSS scanner tool that can be used to scan websites for Cross-Site Scripting (XSS) vulnerabilities. It's a command-line tool that uses a combination of techniques to identify potential XSS vulnerabilities. XSSCon is designed to be easy to use and requires minimal setup. It's a great tool for security researchers, penetration testers, and developers who want to identify and fix XSS vulnerabilities in their applications.
FEATURES
SIMILAR TOOLS
A static analysis tool for PE files that detects malicious behavior and provides information for manual analysis.
PinCTF is a tool for using Intel's Pin Tool to instrument reverse engineering binaries and count instructions.
An open source machine code decompiler that converts binary executables into readable C source code across multiple architectures and file formats.
Blazingly fast Yara queries for malware analysts with an analyst-friendly web GUI.
A tool that extracts and deobfuscates strings from malware binaries using advanced static analysis techniques.
Falcon Sandbox is a malware analysis framework that provides in-depth static and dynamic analysis of files, offering hybrid analysis, behavior indicators, and integrations with various security tools.
PINNED
Proton Pass is a cross-platform password manager that provides encrypted storage, password generation, and security monitoring features with integrated 2FA and dark web monitoring capabilities.
NordVPN is a commercial VPN service that encrypts internet connections and hides IP addresses through a global network of servers, featuring integrated threat protection and multi-device support.
Fractional CISO service that helps B2B companies implement security leadership to win enterprise deals, achieve compliance, and develop strategic security programs.
Checkmarx SCA
A software composition analysis tool that identifies vulnerabilities, malicious code, and license risks in open source dependencies throughout the software development lifecycle.
Orca Security
A cloud-native application protection platform that provides agentless security monitoring, vulnerability management, and compliance capabilities across multi-cloud environments.
DryRun
A GitHub application that performs automated security code reviews by analyzing contextual security aspects of code changes during pull requests.