I would like to have Durzosploit in BT4.
It's a great tool to support in XSS attacks.


Durzosploit Introduction - Engineering For Fun

Description taken from homepage:
Durzosploit is a javascript exploits generator framework that works through the console. This goal of that project is to quickly and easily generate working exploits for cross-site scripting vulnerabilities in popular web applications or web sites.