Browser-based XSS scanner

Hacker News

This is a simple single-file python program that can find basic XSS (cross-site scripting) vulnerabilities in a target url. Most XSS discovery tools use a payload refelection strategy in which payloads are injected in url parameters and the GET response is inspected for places where the payload content is reflected. This is a very low precision XSS detection strategy because most reflection does not support execution. This program uses a different approach, and instead opens the target url in a browser, tests alert(...) payloads directly in the browser context, and listens for an alert being triggered. This means that any XSS spotted by this program is extremely unlikely to be a false positive.

Visit product View on Hacker NewsAug 14, 2024

Share card

Actual performance

57points

2comments

Made the leaderboard

Launch Intel predictions

Analyze your own launch →

AppSumoMay struggle as an AppSumo deal · Missing: plus, platform, intuitive

45%45% predicted probability of success on AppSumo, based on ML models trained on real launch data.

best fitHighest predicted score across all platforms for this description.

Product HuntUnlikely to reach the leaderboard · Strong signals: context, single, open · Missing: mac, agents, macos

39%39% predicted probability of success on Product Hunt, based on ML models trained on real launch data.

Hacker NewsMay not resonate with HN audience · Strong signals: io · Missing: https docs, excited, just released

39%39% predicted probability of success on Hacker News, based on ML models trained on real launch data.

nativeThis product was originally launched on this platform.

Indie HackersIH features products with proven revenue · Strong signals: para · Missing: supports, reddit linkedin, podcasting

36%36% predicted probability of success on Indie Hackers, based on ML models trained on real launch data.

TrustMRRLess likely to generate early MRR · Strong signals: para, scanner · Missing: mobile apps, ios, personal

29%29% predicted probability of success on TrustMRR, based on ML models trained on real launch data.

Acquire.comPre-revenue stage for this audience · Missing: arr, mrr, revenue

17%17% predicted probability of success on Acquire.com, based on ML models trained on real launch data.

BetaListMay not resonate with beta-testers · Missing: web3, chat, crypto

9%9% predicted probability of success on BetaList, based on ML models trained on real launch data.

Incorrect prediction on native model

Similar products

SiteBlob29%Launch Intel prediction score: how likely this product is to succeed on its source platform, based on its name, tagline, and description.

Browser-based website scanner for vibecoding-related issues

Indie Hackerscommitment-side-project

Browser based FFUF26%Launch Intel prediction score: how likely this product is to succeed on its source platform, based on its name, tagline, and description.

A simple browser based FFUF Fuzzer Tool

Indie Hackerscommitment-side-project

Browser-based digital signage41%Launch Intel prediction score: how likely this product is to succeed on its source platform, based on its name, tagline, and description.

Browser-based digital signage

Hacker News7

I made a browser-based RTS game51%Launch Intel prediction score: how likely this product is to succeed on its source platform, based on its name, tagline, and description.

I made a browser-based RTS game

Hacker News212

qq-pwn – A browser-based idler game42%Launch Intel prediction score: how likely this product is to succeed on its source platform, based on its name, tagline, and description.

qq-pwn – A browser-based idler game

Hacker News4

Strudai, browser based agentic wrapper around Strudel33%Launch Intel prediction score: how likely this product is to succeed on its source platform, based on its name, tagline, and description.

Strudai, browser based agentic wrapper around Strudel

Hacker News5

I'm building a browser-based DAW55%Launch Intel prediction score: how likely this product is to succeed on its source platform, based on its name, tagline, and description.

I'm building a browser-based DAW

Hacker News179

Browser-based video trimmer tool40%Launch Intel prediction score: how likely this product is to succeed on its source platform, based on its name, tagline, and description.

Browser-based video trimmer tool

Hacker News6

Browser-Based Tempest – Transmitting VHF Morse via Monitor EMI Leakage48%Launch Intel prediction score: how likely this product is to succeed on its source platform, based on its name, tagline, and description.

Browser-Based Tempest – Transmitting VHF Morse via Monitor EMI Leakage

Hacker News5

Browser Based IDE for Love2D66%Launch Intel prediction score: how likely this product is to succeed on its source platform, based on its name, tagline, and description.

Browser Based IDE for Love2D

Hacker News8

Browse all products Analyze your launch