blind-xss 开源项目推荐（22 个）

ssl /ezXSS

ezXSS是渗透测试人员和错误赏金猎人测试（盲目）跨站点脚本的简单方法。

ethicalhackingplayground /bxss

Blind XSS Scanner is a tool that can be used to scan for blind XSS vulnerabilities in web applications.

mazen160 /xless

The Serverless Blind XSS App

Arcanum-Sec /wraith

WRAITH — a modern browser-hooking framework (BeEF + blind-XSS successor) for red teams, researchers, and educators. For authorized security testing, research & education only.

ivan-sincek /xss-catcher

Simple API for storing all incoming XSS requests and various XSS templates.

AnonKryptiQuz /BeeXSS

BeeXSS is a specialized automated tool designed to detect Blind XSS (Cross-Site Scripting) vulnerabilities in web applications.

rverton /gxss

Blind XSS service alerting over slack or email

0xRahim /Argus

Argus is used to test for Blind XSS and SSRF vulnerbilities or any sort of OOB detection

NHAS /gohunt

Hunt for Blind XSS, A revival of XSSHunter written in Golang, GoHunt brings all your favorite XSSHunter functionality. Plus quality of life improvements!

fyxme /blistener

Blind-XSS listener with payloads to the target user's browser data including cookies, local/session storage, html code, screenshot of current page (HTTP listener optionally)

mdhama /blindAlert

Simple pentesting tool to check Blind XSS

moloch-- /xsshunter

The XSS Hunter service - a portable version of XSSHunter.com

dimondevceo /reverse_shell_javascript

A reverse shell in JavaScript using HTTP, used to confirm blind XSS vulnerabilities and a tool for browser post-exploitation

RedteamNotes /bXSS-Discovery

Local-first, OPSEC-aware workbench for building scoped search queries to discover public intake surfaces during authorized bXSS assessments.

blackvoidx /Blind-XSS

Code to detect Blind XSS vulnerabilities and send notifications to Discord.

wreet /httpalert

simple web request canary app to test for blind XSS

lrluque /blixss

Simple Go tool for Blind XSS detection. Very useful on HTB machines and CTFs.

gkdataio /security-research-library

Source-backed web security research and bug bounty disclosures: stored, reflected and blind XSS, SSRF, SSTI, API authorization, OAuth, AI integrations, diagrams and structured JSON.

Bugatsec /Blind-XSSTrace

Self-hosted Blind XSS testing dashboard with unlimited payload markers, callback logging, page grouping, Discord alerts, import/export, and Render deployment support.

OctopusColonnade83 /wraith-135

WRAITH — a modern browser-hooking framework (BeEF + blind-XSS successor) for red teams, researchers, and educators. For authorized security testing, research & education only.