XSStrike is a program which can fuzz and bruteforce parameters for XSS. It can also detect and bypass WAFs. - View it on GitHub