Browser-based XSS scanner
This is a simple single-file python program that can find basic XSS (cross-site scripting) vulnerabilities in a target url. Most XSS discovery tools use a payload refelection strategy in which payloads are injected in url parameters and the GET response is inspected for places where the payload content is reflected. This is a very low precision XSS detection strategy because most reflection does not support execution. This program uses a different approach, and instead opens the target url in a browser, tests alert(...) payloads directly in the browser context, and listens for an alert being…
Browser-based XSS scanner launched on August 14, 2024 with 57 votes, #768 of 5,471 launches that month and more than 90% of that year's launches. The site was still online in September 2026, 2 years on.
In plain words
Browser-based XSS scanner is a Python tool that detects cross-site scripting vulnerabilities by opening target URLs in a browser and testing alert payloads directly in the browser context. Unlike traditional scanners that look for payload reflection in HTML responses, this tool listens for actual alert execution, reducing false positives. It's designed for security researchers and developers who need accurate XSS vulnerability detection. Available as a single-file Python program.
written from the facts on this page · September 2026
From the sources
Contribute to dshieble/playwright_xss_scanner development by creating an account on GitHub.
In the maker’s words, at launch
This is a simple single-file python program that can find basic XSS (cross-site scripting) vulnerabilities in a target url. Most XSS discovery tools use a payload refelection strategy in which payloads are injected in url parameters and the GET response is inspected for places where the payload content is reflected.…
Does a similar job
all alternatives →- XRXRss – RSS Reader and web stack demo2023 · xrss.infogulch.com · ▲144
XRss is a simple RSS reader web app built to showcase xtemplate, a new web development tool based on Go's html/template and Caddy server. The entire site UI for XRss comes from a single HTML template file. This index.html includes everything from SQL queries and route definitions and handlers to htmx state transition attributes and tailwindcss classes, and developing it requires zero build steps (amortized). Check out the source which manages to be at once banal and gnarly: https://github.com/infogulch/xrss/blob/master/templates/inde... xtemplate…
Pythondocs.xyz – Live search for Python documentation2022 · pythondocs.xyz · ▲74Hi everyone! I've been working on a web search interface for Python's documentation as a personal project, and I think it's ready for other people to use... Please give it a go (and join me in praying to the server gods): https://pythondocs.xyz/ Here's the tech stack for those interested: - Parser: Beautiful Soup + Mozilla Bleach - Database: in-memory SQLite (aiosqlite) + SQLAlchemy - Web server: FastAPI + Uvicorn + Jinja2 - Front end: Tailwind CSS + htmx + Alpine.js I have ideas for future improvements but hopefully the current version is useful to someone. Let me know what…
CrossHair – SMT Assisted Testing for Python2020 · github.com · ▲97An analysis tool for Python that blurs the line between testing and type systems. - pschanely/CrossHair
BrowserTotal: A framework for analyzing browser security posture2025 · browsertotal.com · ▲28Live extension analysis: Point us at a Chrome/Edge/Firefox extension (store URL or CRX). We spin up a safe sandbox and observe it in real time—permissions use, message passing, storage writes, network calls, remote code loading, and UI injections. Package scanning: Paste an npm/package URL or code. We do quick static + dynamic checks: install/postinstall scripts, obfuscation/eval, exfil endpoints, suspicious APIs, and typosquat/reputation signals. AI explainer: An LLM summarizes the behaviors and risk patterns in plain English (why it’s risky, what to verify,…
Real-time security risks detection for any website or server2020 · hostedscan.com · ▲22Online automated vulnerability scanner to secure firewalls, servers, web applications, and apis. Try 14 days for free.
More dev tools this month
the category →
open-source IDE for thoughtful software design. Contribute to devdotfast/whiteboard development by creating an account on GitHub.
Dev tools · 28d ago · github.com
Contribute to reladraw/reladraw development by creating an account on GitHub.
Dev tools · 26d ago · github.com
OpenBot▲362Grok Bot alternative: free, local, open-source, multiplayer
Dev tools · 23d ago · openbot.run
Talanoa▲346Hi HN, I’m a fullstack developer, and honestly, I’ve lost count of how many side projects I’ve worked on over the years. But one idea kept coming back to me: a different kind of email client. It first came to me in 2014: “What if we could handle emails more like conversations?” Every year, I’d revisit this concept in my “Build Notes.” Ten years later, no one had built exactly what I had in mind — so I finally decided to do it myself. That’s how Talanoa was born. I wanted something focused on people, not timelines. I was tired of marking messages as unread just to remember to reply later, or…
Dev tools · 21d ago · talanoa.email
CoreSpeed▲332One MCP for everything your agents need: apps, memory, tools
Dev tools · 29d ago · corespeed.io
Source: Show HN post ↗ · launch text quoted in part
Launched alongside, August 2024
the whole month →
Jupitrr AI▲1,195Jupitrr AI turns raw talking videos into scroll-stopping content for coaches and consultants. Research, script, record, edit, and publish in one app.
AI · 2024 · jupitrr.com
Hey there HN! We’re Joe and Stopa, and today we’re open sourcing InstantDB, a client-side database that makes it easy to build real-time and collaborative apps like Notion and Figma. Building modern apps these days involves a lot of schleps. For a basic CRUD app you need to spin up servers, wire up endpoints, integrate auth, add permissions, and then marshal data from the backend to the frontend and back again. If you want to deliver a buttery smooth user experience, you’ll need to add optimistic updates and rollbacks. We do these steps over and over for every feature we build, which can…
Dev tools · 2024 · github.com