XSSHunter is an open-source platform designed to identify and exploit blind Cross-Site Scripting (XSS) vulnerabilities. It provides security researchers, bug bounty hunters, and penetration testers with a comprehensive toolkit for detecting XSS flaws that are otherwise difficult to discover through traditional testing methods.
Requires Docker runtime or Docker Compose environment.
Explore discussions, issues, and documentation to see how this project fits your workflow.
GitHub stars measure repository interest, not customer satisfaction.
Standard Docker Compose deployment
version: '3.8'
services:
xsshunter:
image: xsshunter:latest
restart: always
ports:
- "8080:8080"XSSHunter is a modern self-hosted, privacy-first privacy solution. XSSHunter is an open-source platform designed to identify and exploit blind Cross-Site Scripting (XSS) vulnerabilities. It provides security researchers, bug bounty hunters, and penetration testers with a comprehensive toolkit for detecting XSS flaws that are otherwise difficult to discover through traditional testing methods. Built for users and teams demanding full data ownership, XSSHunter eliminates proprietary vendor lock-in while delivering an intuitive, reliable experience.
These tools share use cases. Features, costs, and deployment needs differ.
Open-source identity and access management platform with multi-tenancy, OpenID Connect, SAML, and OAuth 2.0 support.
WG-Easy is a simple and user-friendly WireGuard VPN server with a web interface for easy management.
Web-Check is a powerful all-in-one website analyzer that provides detailed insights into any website's security, performance, and functionality.
GitHub stats captured Oct 5, 2026.