An intelligent cross-site scripting detection tool that crawls, fuzzes, and brute-forces parameters while bypassing WAFs during authorized web application testing.
XSStrike — Advanced XSS Detection and Exploitation Suite
An intelligent cross-site scripting detection tool that crawls, fuzzes, and brute-forces parameters while bypassing WAFs during authorized web application testing.
Ready-to-run agent install
This asset can be installed after the agent chooses its runtime, checks the plan, and runs the matching command.
npx -y tokrepo@latest install db07d73e-8956-11f1-9bc6-00163e2b0d79 --target codexRun after dry-run confirms the install plan.
Discussion
Related Assets
OpenKruise — Advanced Kubernetes Workload Management
OpenKruise extends Kubernetes with advanced workload controllers for in-place updates, sidecar management, image pre-pulling, and fine-grained rolling strategies that go beyond native Deployments and StatefulSets.
ModSecurity — Open Source Web Application Firewall Engine
ModSecurity is a cross-platform web application firewall engine that inspects HTTP traffic in real time. Originally an Apache module, it now runs as a standalone library (libmodsecurity) embeddable in Nginx, Apache, and IIS, with rule sets like OWASP CRS providing out-of-the-box protection against SQL injection, XSS, and other OWASP Top 10 threats.
hashcat — Advanced GPU-Accelerated Password Recovery
The fastest password recovery tool supporting 350+ hash types with GPU acceleration for security auditing and penetration testing.
PostgreSQL — The Most Advanced Open Source Relational Database
PostgreSQL is the most powerful open-source relational database system. It combines SQL compliance, extensibility, and reliability with advanced features like JSONB, full-text search, vector embeddings (pgvector), and PostGIS — making it the database of choice for modern applications.