I use the best, I use the rest


Core tools which industrialize XSS discovery, propagation and exploitation.

Only a few tools, but definitely the best of the best !


Mutation, evasion, worm propagation tools available online.

A useful and accessible collection of tools to help you improve your payloads, as long as you understand what you are doing...


A fine selection of great XSS companion tools : Payloads generators, proxies, botnets ...

A lot of quite advanced stuff to move one step further. If you dare !

Reading the doc and/or the code is highly recommanded before you do anything with these "things".


Test your XSS skills on live online web sites dedicated to XSS vulnerabilities.

Let's see what you're able to !