Reflex
An educational Python toolkit for learning common web vulnerability classes: reflected and DOM-based XSS, open redirects, and a mutation fuzzer, with coloured output and HTML reports. Built to understand how these attacks actually work, not to run against live targets.
Problem
The best way to understand a vulnerability class is to implement its detection yourself, not read about it.
Approach
A Python toolkit covering reflected and DOM-based XSS, open redirects, and a mutation fuzzer, with coloured terminal output and HTML reports. Inspired by Google's Project Zero. Built for learning and demonstration against intentionally vulnerable test targets.
Outcome
Public on GitHub and pinned on my profile. Defensive framing throughout — it's a learning tool, not an attack tool.