• Townie
    AI
  • Blog
  • Docs
  • Pricing
  • Weโ€™re hiring!
Log inSign up
alpaca1712

alpaca1712

XSSAgent

Public
Like
XSSAgent
Home
Code
6
backend
3
frontend
1
shared
1
PROJECT_SUMMARY.md
README.md
SETUP.md
Branches
1
Pull requests
Remixes
History
Environment variables
Val Town is a collaborative website to build and scale JavaScript apps.
Deploy APIs, crons, & store data โ€“ all from the browser, and deployed in milliseconds.
Sign up now
Code
/
README.md
Code
/
README.md
Search
โ€ฆ
README.md

XSS Testing Agent

An intelligent XSS vulnerability testing tool that combines AI-powered analysis with automated payload generation.

Features

  • Web Interface: Simple frontend for entering target URLs
  • AI-Powered Analysis: Uses Novita AI (GPT-OSS-20B) for intelligent XSS detection and analysis
  • Dynamic Payload Generation: Integrates with MCP service for XSS payload generation
  • Real-time Testing: Automated testing of XSS vulnerabilities with detailed reporting

Architecture

โ”œโ”€โ”€ backend/
โ”‚   โ”œโ”€โ”€ index.ts           # Main Hono server
โ”‚   โ”œโ”€โ”€ routes/
โ”‚   โ”‚   โ”œโ”€โ”€ xss.ts         # XSS testing endpoints
โ”‚   โ”‚   โ””โ”€โ”€ static.ts      # Static file serving
โ”‚   โ””โ”€โ”€ services/
โ”‚       โ”œโ”€โ”€ novita.ts      # Novita AI integration
โ”‚       โ””โ”€โ”€ mcp.ts         # MCP service integration
โ”œโ”€โ”€ frontend/
โ”‚   โ”œโ”€โ”€ index.html         # Main UI
โ”‚   โ”œโ”€โ”€ index.tsx          # React frontend
โ”‚   โ””โ”€โ”€ components/
โ”‚       โ”œโ”€โ”€ App.tsx        # Main app component
โ”‚       โ”œโ”€โ”€ UrlInput.tsx   # URL input form
โ”‚       โ””โ”€โ”€ Results.tsx    # Test results display
โ””โ”€โ”€ shared/
    โ””โ”€โ”€ types.ts           # Shared TypeScript types

Environment Variables

  • NOVITA_API_KEY: Your Novita AI API key
  • MCP_API_KEY: Your MCP service API key for accessing XSS payloads

Usage

  1. Enter a target URL in the web interface
  2. The system will:
    • Fetch XSS payloads from the MCP service
    • Use Novita AI to analyze the target and generate testing strategies
    • Execute XSS tests and provide detailed results
    • Generate recommendations for remediation

Security Notice

This tool is for authorized security testing only. Only test websites you own or have explicit permission to test.

FeaturesVersion controlCode intelligenceCLI
Use cases
TeamsAI agentsSlackGTM
DocsShowcaseTemplatesNewestTrendingAPI examplesNPM packages
PricingNewsletterBlogAboutCareers
Weโ€™re hiring!
Brandhi@val.townStatus
X (Twitter)
Discord community
GitHub discussions
YouTube channel
Bluesky
Open Source Pledge
Terms of usePrivacy policyAbuse contact
ยฉ 2025 Val Town, Inc.