// what it is
Description
s0md3v's XSS finder that goes beyond grep-style detection — it parses HTML context (attribute, tag, script block) and generates payloads tailored to each. Includes a built-in payload mutator.
// use cases
What people use it for
- Find reflected XSS automatically
- Confirm DOM-based XSS
// commands
The commands you'll type
Crawl + fuzz
$ python xsstrike.py -u 'https://target/page?q=test' --crawl