XSS
What is XSS?
Cross-site scripting (XSS) is the name that refers to a particular weakness in web application security. The weakness is caused by incorrect handling of data input, such as cookie data, URL, or HTTP request parameters. The issue with the weak input sanitization is that some of the data may be returned to the user and perform custom script execution.
Tool categories
There are 2 tool collections available that cover XSS:
Security tools
The following security tools are linked to XSS and are worth investigating.
- 0d1n (fuzzing tool for web applications)
- Damn Small XSS Scanner (cross-site scripting scanner)
- Pybelt (pentest toolkit)
- Tulpar (web vulnerability scanner)
- WPSeku (WordPress vulnerability scanner)
- XSS Hunter (Cross-site scripting scanner)
- XSSER (Cross-site scripting scanner)
- XSStrike (XSS detection and exploitation suite)