s0md3v/XSStrike
Most advanced XSS scanner. observed · 2026-08-28
Health v2 · maintenance only
31/100
- Activity 18
- Release rhythm 8
- Longevity 100
How is this computed?
round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10) — computed 2026-09-02. Adoption (stars, forks) is never an input.
- gap_med: n/a
- age_days: 3355
- days_rel: 534
- days_push: 494
- n_releases_24m: 1
Adoption not part of the score
15151 stars · 2094 forks observed · 2026-08-28
What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-29, confidence not recorded
XSStrike is a Python command-line Cross Site Scripting (XSS) detection suite that uses hand-written HTML/JavaScript parsers, context analysis, an intelligent payload generator, and a fuzzing engine to find exploitable XSS vulnerabilities. It also offers multi-threaded crawling, parameter discovery, WAF detection and evasion, DOM XSS scanning, and blind XSS support.
Use cases
- scan a website for reflected and DOM XSS vulnerabilities
- find XSS payloads that bypass a WAF
- crawl a site and test parameters for cross-site scripting
- bruteforce XSS payloads from a custom wordlist
- detect outdated JavaScript libraries on a target
- test for blind XSS in web forms
When to choose
- you need context-aware XSS detection rather than blind payload injection
- you want a free, scriptable CLI scanner for penetration testing engagements
- you need WAF fingerprinting and evasion payloads in one tool
When to avoid
- you need a full web application vulnerability scanner beyond XSS
- you require a maintained tool with active development and recent fixes
- you want a GUI-based scanning workflow
Facets
cli-tool · maturity maintenance
penetration-testing vulnerability-scanning web-scraping fuzzing parser security penetration-testing web-development crawlers python cli windows xss xss-scanner waf-detection dom-xss payload-generator blind-xss security-testing linux macos
1 source
- readme: https://github.com/s0md3v/XSStrike · fetched 2026-08-28 · 862c730e2fea
Member repositories
| Repository | Role | Health v2 |
|---|---|---|
| s0md3v/XSStrike | main | 31 |
For agents
Data as of 2026-08-30T08:39:29.467469+00:00 · Report a problem