Dev tools · alternatives · 2026
24 alternatives to Browser-based XSS scanner
This is a simple single-file python program that can find basic XSS (cross-site scripting) vulnerabilities in a target url. Most XSS discovery tools use a payload refelection strategy in which payloads are injected in url parameters and the GET response is inspected for places where the payload content is reflected. This is a very low precision XSS detection strategy because most reflection does not support execution. This program uses a different approach, and instead opens the target url in a browser, tests alert(...) payloads directly in the browser context, and listens for an alert being…
Browser-based XSS scanner is a Python tool that detects cross-site scripting vulnerabilities by opening target URLs in a browser and testing alert payloads directly in the browser context. Unlike traditional scanners… Below are 24 products that do a similar job, ranked by how close each is in meaning and then by launch-day votes. Browser-based XSS scanner launched in 2024; newer entries below may have overtaken it.
- 1XR
XRss is a simple RSS reader web app built to showcase xtemplate, a new web development tool based on Go's html/template and Caddy server. The entire site UI for XRss comes from a single HTML template file. This index.html includes everything from SQL queries and route definitions and handlers to htmx state transition attributes and tailwindcss classes, and developing it requires zero build steps (amortized). Check out the source which manages to be at once banal and gnarly: https://github.com/infogulch/xrss/blob/master/templates/inde... xtemplate…
2023 · xrss.infogulch.com · its alternatives →
- 2
Scan any website for security flaws in one click
Nov 2025 · chromewebstore.google.com · its alternatives →
- 3
Hi everyone! I've been working on a web search interface for Python's documentation as a personal project, and I think it's ready for other people to use... Please give it a go (and join me in praying to the server gods): https://pythondocs.xyz/ Here's the tech stack for those interested: - Parser: Beautiful Soup + Mozilla Bleach - Database: in-memory SQLite (aiosqlite) + SQLAlchemy - Web server: FastAPI + Uvicorn + Jinja2 - Front end: Tailwind CSS + htmx + Alpine.js I have ideas for future improvements but hopefully the current version is useful to someone. Let me know what…
2022 · pythondocs.xyz · its alternatives →
- 4
Performs analysis of a webpage to figure out the best way how to scrape its data. Provide a URL and data points to find and get back a detailed dashboar...
2018 · apify.com · its alternatives →
- 5
- 6
An analysis tool for Python that blurs the line between testing and type systems. - pschanely/CrossHair
2020 · github.com · its alternatives →
- 7
Live extension analysis: Point us at a Chrome/Edge/Firefox extension (store URL or CRX). We spin up a safe sandbox and observe it in real time—permissions use, message passing, storage writes, network calls, remote code loading, and UI injections. Package scanning: Paste an npm/package URL or code. We do quick static + dynamic checks: install/postinstall scripts, obfuscation/eval, exfil endpoints, suspicious APIs, and typosquat/reputation signals. AI explainer: An LLM summarizes the behaviors and risk patterns in plain English (why it’s risky, what to verify,…
2025 · browsertotal.com · its alternatives →
- 8
I noticed the growing security concerns around MCP (https://news.ycombinator.com/item?id=43600192) and built an open source tool that can detect several patterns of tool poisoning attacks, exfiltration channels and cross-origin manipulations. MCP-Shield scans your installed servers (Cursor, Claude Desktop, etc.) and shows what each tool is trying to do at the instruction level, beyond just the API surface. It catches hidden instructions that try to read sensitive files, shadow other tools' behavior, or exfiltrate data. Example of what it detects: - Hidden instructions…
2025 · github.com · its alternatives →
- 9
A Powerful Spider(Web Crawler) System in Python. Contribute to binux/pyspider development by creating an account on GitHub.
2014 · github.com · its alternatives →
- 10EY
2019 · secalerts.co · its alternatives →
- 11
Online automated vulnerability scanner to secure firewalls, servers, web applications, and apis. Try 14 days for free.
2020 · hostedscan.com · its alternatives →
- 12
Phantom Analyzer▲169A real-time website scanner to see what trackers are lurking
2020 · usefathom.com · its alternatives →
- 13
A web tool to scan websites for common vulnerabilities
2025 · webscan.dheerajjha.com · its alternatives →
- 14
I built this after seeing multiple teams accidentally ship API keys in their frontend code. The problem: Modern web development moves fast. You're vibe-coding, shipping features, and suddenly your AWS keys are sitting in a tag visible to anyone who opens DevTools. I've personally witnessed this happen to at least 3-4 production apps in the past year alone. KeyLeak Detector runs through your site (headless browser + network interception) and checks for 50+ types of leaked secrets: AWS/Google keys, Stripe tokens, database connection strings, LLM API keys (OpenAI, Claude, etc.), JWT…
Nov 2025 · github.com · its alternatives →
- 15
A chrome extension tracks front-end JavaScript that uses DOM / jQuery APIs to manipulate html dom elements (e.g., change style, attach event listener) at runtime. - pilagod/js-tracker
2018 · github.com · its alternatives →
- 16
2021 · github.com · its alternatives →
- 17
VibeScan▲9Beta tool that runs OWASP/Nuclei/ZAP checks fast and prioritizes fixes; would love test runs on your staging domains and blunt feedback.
2025 · vibescan.co.kr · its alternatives →
- 18
Add OSINT & Threat tooltips to all pages. Use any REST API!
2017 · github.com · its alternatives →
- 19
2014 · github.com · its alternatives →
- 20
Hello all, Very excited to share this project with you all! Panoptisch scans your Python file or module to find it's imports (aka dependencies) and recursively does so for all dependencies and sub-dependencies. It then generates a dependency tree in JSON for you to parse and enforce import policies. Supply chain attacks are no joke, and this is one way to transparently analyze your dependencies to see if any malicious imports are taking place. For example, your yaml parser, nor it's sub-dependencies should import socket, or sys. Panoptisch is in early stages, with known limitations (for…
2022 · github.com · its alternatives →
- 21
Hi HN, I'm Tyler Flint. Eight months ago we shared qtap here (https://news.ycombinator.com/item?id=43928118). Today we're releasing DevTools - a browser-based interface that gives you the Chrome Network tab experience for server-side HTTP/S traffic. The problem: You're debugging a production issue. An external dependency is returning errors. Your logs say "request failed" but not what was actually sent. Adding debug logging means redeploying and restarting services - which takes time and often changes the conditions you're trying to debug. tcpdump shows encrypted blobs.…
Jan 2026 · qpoint.io · its alternatives →
- 22
CYREX▲62Web security vulnerability assessment & penetration testing
2021 · cyrex.tech · its alternatives →
- 23
Adaptive Python web scraping toolkit + MCP server for AI agents. Self-healing selectors that survive site changes, TLS-fingerprint stealth to bypass anti-bot filters, CSS/XPath parsing, and 24 built-in scrapers, clean, structured, LLM-ready data from any URL. - mldsveda/PyScrappy
Aug 2026 · github.com · its alternatives →
- 24RA
2017 · beta.secureit.io · its alternatives →
Also compare
Ranked by how close each launch is in meaning, then by votes. Prices were read from each product’s own site when checked and can change. Refine with your own description →