PythonWeb SecurityXSSSecurity Tooling
Reflex
A Python web-vulnerability toolkit for lab and authorised testing: reflected and DOM-based XSS detection, open-redirect checks and a mutation fuzzer, with coloured output and HTML reports.
Problem
The best way to understand a vulnerability class is to implement its detection yourself, not read about it.
Approach
A Python toolkit covering reflected and DOM-based XSS, open redirects, and a mutation fuzzer, with coloured terminal output and HTML reports. Inspired by Google's Project Zero. Built for learning and demonstration against intentionally vulnerable test targets.
Outcome
Public on GitHub and pinned on my profile. Defensive framing throughout — it's a learning tool, not an attack tool.