Xss Python Packages

csp-toolkit

Content Security Policy analysis, bypass detection, and CI gating. 21 weakness checks with A+ to F grading, 79 known bypass domains, SARIF output, and a GitHub Action.

arcis

Inside-the-app security middleware for Node.js, Python, and Go. 20+ attack vectors. One install, three languages, MIT.

mkdocs-safe-text-plugin

Plugin for safe text editing with MKDocs.

wshawk

Open source toolkit for WebSocket security testing, web application penetration testing, and stateful attack validation. It combines a CLI scanner, web dashboard, Electron desktop app, browser companion, and project-backed workflows for authorized security assessments.

stingxss

Context-aware reflected & DOM XSS scanner with WAF detection and evasion

pyvalitron

🔰 Python Inputs Validation Library.

polyglot-bug-hunter-x

Multimodal AI web bug hunter: sees, hears and reads a website while hunting bugs. 43 non-destructive payloads, CVSS v3.1 scoring, offline demo, CLI, Kaggle kernel.

blindx

Blind XSS Automation Tool

xss-shield

A Python library to prevent your website from being attacked

brs-xss

MIT license BRS-XSS is a modular Python CLI scanner for XSS vulnerabilities. Features context-aware payloads, WAF evasion, DOM analysis via Playwright, ML-based risk scoring, and export in HTML/JSON/SARIF. Designed for integration with Brabus Recon Suite (BRS).

mcp-server-inject-bender

🎭 Inject Bender - Security Through Absurdity! Transform SQL injections into hiking boot ads. Skippie 📎 & Odin ⚡

i18n-security-lint

Closing the localization gap in open source: evidence on how Indic and other under-served locales get reviewed upstream, plus i18n tooling — including i18n-security-lint, a CI scanner for defects in translated strings.

brs-kb

BRS-KB is XSS Knowledge Base API

spyhunt

SpyHunt v4.0: A comprehensive Network Scanner & Vulnerability Assessment tool. Automate OSINT, Reconnaissance, and Bug Bounty hunting with advanced scanners (XXE, SSRF, SSTI, SQLi) plus Nuclei & Shodan integration. (Fork from @gotr00t0day)

crabguard

Enterprise web security scanner — Burp Suite + OWASP ZAP alternative. pip install crabguard

pythem

pentest framework

sechead

Python CLI tool for auditing website security headers, CSP, HSTS, clickjacking protections, and HTTP hardening issues.

untrusted

Safer Python with types for untrusted input

larztemplate

A small, safe template engine: HTML autoescaping and a sandboxed expression evaluator. Pure Python, zero dependencies.

xss-checker

XSS-Checker is a tool used to Check / Validate for XSS vulnerabilities

gloomproxy-sdk

Browse a target normally and watch the attack surface graph build itselfc — all correlated in real time. Then hit it with distributed scanner plugins, replay and fuzz interesting requests, and manage auth across the whole engagement from a single UI.

larzhtml

Build HTML in Python, safely: text and attributes are escaped by default (XSS-safe). Composable tag builders. Zero dependencies.

paranoic-scan

Refurbished paranoicscan tool

safescript

SafeScript is a Python module designed to bolster web application security by offering functions that combat common vulnerabilities like XSS and SQL Injection attacks. It provides methods for sanitizing HTML content, escaping special characters, and preventing malicious input from compromising your application's integrity.