DSXS
DSXS is a great example of a tool that does one small job extremely simply. At under 100 lines of Python, it can test GET and POST parameters and identify some reflected and DOM-based XSS cases without the complexity of a full framework. We'd reach for it when we need a fast, lightweight XSS sanity check or a tiny script we can easily understand and modify. Its simplicity is also its limitation: don't expect the coverage or context analysis of modern XSS scanners.
Read the rest for free
Leave your email to see the full write-up for DSXS, the download details and every other tool on the site. You will also get the weekly brief. One email a week, unsubscribe from any of them.
We use your address for the brief and nothing else, and never pass it on. See the privacy policy.