Back Sploitus

BruteXSS exploit

Sploitus • September 18, 2026

BruteXSS — это инструмент, написанный на Python, для поиска XSS-уязвимостей в веб-приложениях.

Этот инструмент изначально был разработан Шаваром Ханом (Shawar Khan) в CLI. Я просто переработал его и сделал графический интерфейс для большего удобства.

Инструмент разработан на Python, поэтому он кроссплатформенный — вам нужен только установленный Python на вашем компьютере.

![Alt text](

1. Просто скачайте инструмент и запустите brutexss.py (всё необходимое для работы уже включено).

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

New Exploits Released: netattack2 and BruteXSS Tools On September 18, 2026, two new Python-based cybersecurity tools were released: netattack2 and BruteXSS. Netattack2 is designed for network scanning and attacks, capable of identifying active hosts, operating systems, and open ports, while also executing ARP spoofing and DoS attacks. BruteXSS focuses on detecting XSS vulnerabilities in web applications, featuring a graphical interface for ease of use. Both tools are open-source and available on GitHub, raising concerns about their potential misuse by malicious actors. The release of these tools could lead to increased attacks on networks and web applications, affecting organizations that do not implement robust security measures. Security professionals are urged to be vigilant and assess their defenses against these new threats. 2 sources 34

Extracted Entities

BruteXSS exploit

The full story

Extracted Entities

CWE Weaknesses (1)

Tools (2)

Vulnerabilities (1)