Alternatives to XSStrike
Cross-site scripting detection suite with context analysis. The listings below can replace it for an important use case. Each note says what changes if you switch.
The original
XSStrike
Cross-site scripting detection suite with context analysis.
Replacements
Listings that take over the same core job as XSStrike.
Dalfox
Check web applications for cross-site scripting issues.
Dalfox is an MIT-licensed cross-site scripting scanner that automates parameter analysis and validation checks, and appears more actively maintained than XSStrike's quiet upstream.
Similar software
Related functionality, not a direct replacement.
ZAP
Open-source web application security scanner and intercepting proxy.
ZAP
Inspect and test web applications with the ZAP security proxy.
Wapiti
Check web applications with a Python-based vulnerability scanner.
Burp Suite Community Edition
PortSwigger's free web security testing toolkit, for intercepting, inspecting and modifying HTTP traffic by hand.
ffuf
Test variations in HTTP requests with a command-line fuzzer.
sqlmap
Automates detecting and exploiting SQL injection flaws, for testing your own applications before someone else does.
