hahwul/XSpear

Health v2 · maintenance only

Flags: archived

Adoption not part of the score

1364 stars · 239 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

XSpear is a Ruby-based XSS (cross-site scripting) scanner and parameter analysis tool distributed as a gem, usable both as a CLI and as a Ruby library. It performs pattern-matching and headless-browser (Selenium) detection of XSS payloads, filter bypass tests, blind XSS checks, and security header analysis. The repository has been archived and is no longer maintained; the author recommends Dalfox instead.

Use cases

• scan a website for reflected XSS vulnerabilities
• find injectable parameters in web app URLs
• test for XSS filter bypass with event handlers and special chars
• detect alert/confirm/prompt execution via headless browser
• run blind XSS tests with XSS Hunter or ezXSS endpoints
• analyze security headers like CSP and HSTS
• scan requests exported from Burp Suite or ZAP raw files
• integrate XSS scanning into Ruby code or CI pipelines

When to choose

• you need a Ruby-native XSS scanner usable as a gem library
• you want parameter analysis plus XSS testing in one CLI tool
• you need JSON or HTML scan reports for bug bounty triage
• you want to test blind XSS with callback URLs

When to avoid

• you need an actively maintained tool - the repo is archived and read-only
• you want the fastest or most feature-rich XSS scanner - use Dalfox instead
• you are not comfortable installing Ruby gems and Selenium dependencies
• you need non-web vulnerability scanning

Facets

cli-tool · maturity abandoned

vulnerability-scanning security cli penetration-testing security penetration-testing web-development developer-tools cli ruby cross-platform xss-scanner bugbounty pentest selenium headless-browser blind-xss ruby-gem archived

Member repositories

For agents

markdown · JSON · MCP: product_card(name="hahwul/XSpear")