cross-site-scripting

There are 12 repositories under cross-site-scripting topic.

cure53 / DOMPurify
DOMPurify - a DOM-only, super-fast, uber-tolerant XSS sanitizer for HTML, MathML and SVG. DOMPurify works with a secure default, but offers a lot of configurability and hooks. Demo:
xss sanitizer dom security javascript dompurify prevent-xss-attacks mathml html svg cross-site-scripting
Language:JavaScript 16169
payloadbox / xss-payload-list
🎯 Cross Site Scripting ( XSS ) Vulnerability Payload List
bugbounty cross-site-scripting dom-based payload payloads reflected-xss-vulnerabilities self-xss websecurity website-vulnerability xss xss-attacks xss-detection xss-exploitation xss-injection xss-payload xss-payloads xss-poc xss-scanner xss-scanners xss-vulnerability
7684
andresriancho / w3af
w3af: web application attack and audit framework, the open source web vulnerability scanner.
scanner security appsec cross-site-scripting sql-injection
Language:Python 4813
toxssin
t3l3machus / toxssin
An XSS exploitation command-line interface and payload generator.
cross-site-scripting exploitation hacking javascript penetration-testing pentesting-tools python web-penetration-testing xss xss-exploitation xss-vulnerability
Language:Python 1399
LewisArdern / bXSS
bXSS is a utility which can be used by bug hunters and organizations to identify Blind Cross-Site Scripting.
xss bxss security bugbounty blueteam cross-site-scripting infosec
Language:JavaScript 557
paragonie / csp-builder
Build Content-Security-Policy headers from a JSON file (or build them programmatically)
content-security-policy cross-site-scripting csp csp-builder csp-header easy-to-use http http-header json-configuration php secure-by-default security xss
Language:PHP 542
rizemon / exploit-writing-for-oswe
Tips on how to write exploit scripts (faster!)
awae awae-prep oswe oswe-prep python python3 requests web-exploitation cross-site-scripting sql-injection sqli xss
521
ethicalhackingplayground / bxss
Blind XSS Scanner is a tool that can be used to scan for blind XSS vulnerabilities in web applications.
blind-xss bugbounty cross-site-scripting pentesting-tools
Language:Go 364
Sharpforce / XSS-Exploitation-Tool
An XSS Exploitation Tool
cross-site-scripting xss xss-attacks
Language:PHP 322
Egyscan
dragonked2 / Egyscan
Egyscan The Best web vulnerability scanner; it's a multifaceted security powerhouse designed to fortify your web applications against malicious threats. Let's delve into the tasks and functions that make Egyscan an indispensable tool in your security arsenal:
cybersecurity scanner vulnerability-scanners command-line cross-site-scripting injection python rce remote sqlinjection vulnerability vulnerability-detection xss sql-injection-remote-code-execution-cross-site remote-code-execution sql-injection command-injection lfi ssrf xxe-injection
Language:Python 300
Stuub / Helios
Helios: Automated XSS Testing
code-execution cross-site-scripting cve cve-2024 cybersecurity offensive-security owasp penetration-testing python red-team stuub xss
Language:Python 155
Proviesec / xss-payload-list
xss-payload-list
bugbounty cross-site-scripting pentesting security xss
Language:JavaScript 123
moeinfatehi / xss_vulnerability_challenges
this repository is a docker containing some "XSS vulnerability" challenges and bypass examples.
application-security appsecurity infosec penetration-testing pentesting xss xss-attacks xss-detection xss-exploitation xss-filter xss-vulnerability cross-site-scripting input-validation owasp owasp-top-10 owasp-top-ten
Language:PHP 117
Damian89 / xssfinder
Toolset for detecting reflected xss in websites
xss itsecurity cross-site-scripting vulnerability-detection bugbounty pentesting python3
Language:Python 114
dipakpanchal05 / CVE-2022-23808
phpMyAdmin XSS
zeroday xss exploit exploitation phpmyadmin database cross-site-scripting vulnerability bugbounty redteam redteaming pentesting hacking poc owasp owasp-top-10 infosec
114
jackaduma / NLP4CyberSecurity
NLP model and tech for cyber security tasks
cyber-security cybersecurity deep-learning machine-learning network-security nlp nlp-deep-learning nlp-machine-learning malicious-url-detection password-strength phishing-detection text-classification cross-site-scripting cross-site-scripting-proof phishing-attacks code-injection command-injection sql-injection xss-injection
Language:Jupyter Notebook 88
The404Hacking / XsSCan
XsSCan | Web Application XSS Scanner | Coded By Sir.4m1R [Mr.Hidden]
the404hacking xssscan xss scan scanner security security-scanner xss-vulnerability subdomain hacking python cross-site-scripting
Language:Python 86
xadhrit / xira
xss vulnerability scanner and input fuzzing tool.
pentesting-tools web-hacking cross-site-scripting vulnerability-scanners python3
Language:Python 63
MrPr0fessor / Google-Dorks-for-Cross-site-Scripting-XSS
Cross-Site Scripting (XSS) injects malicious scripts into trusted websites via user input. Attacker-sent scripts run in users' browsers, accessing sensitive data, cookies, and even altering HTML content. Widespread due to input validation lapses.
cross-site-scripting cyber cyber-security ethical-hacking-tools google-dorks penetration-testing-tools vulnerability-assessment vulnerability-detection vulnerability-scanners web-application-security web-penetration-testing xss xss-payload xss-payloads xss-vulnerability find-xss
61
Encryptor-Sec / XSSearch
XSSearch is a comprehensive reflected XSS tool built on selenium framework in python language. It contains more than 3000 payloads for automating XSS attacks and validating XSS endpoint
xss cross-site-scripting reflect-xss python3 selenium-webdriver linux command-line-tool bugbounty xss-detection xss-finder xss-payloads xss-scanner
Language:Python 60
ML-based-WAF
vladan-stojnic / ML-based-WAF
Simple machine learning based web application firewall (WAF) created in python
sqli xss path-traversal sql-injection cross-site-scripting cmdi command-injection parameter-tampering http ml machine-learning svm tf-idf decision-trees waf web-application-firewall python sklearn scapy dash
Language:Jupyter Notebook 60
sametsahinnet / jsscm
JSSCM detects expired domains for Stored XSS exploitation during browsing.
application-security bugbounty bugbounty-tool chrome-extension cross-site-scripting infosec javascript pentesting security security-scanner security-tools vulnerability web-security xss
Language:JavaScript 53
ivan-sincek / xss-catcher
Simple API for storing all incoming XSS requests and various XSS templates.
api blind-xss bug-bounty cors cross-origin-resource-sharing cross-site-request-forgery cross-site-scripting csrf ethical-hacking javascript offensive-security penetration-testing php red-team-engagement security web web-penetration-testing xss
Language:HTML 48
deep-security / aws-waf
Deep Security's APIs make it simple to integration with a variety of AWS Services
aws-waf deep-security sql-injection cross-site-scripting iplist security-automation
43
Ak-wa / XSSRecon
XSSRecon - Reflected XSS Scanner
xss-exploitation xss-scanner cross-site-scripting scanner-web python3 linux kali-linux kali-scripts
Language:Python 28
hexrom / CookieHeist
PHP Cookie Stealing Scripts for use in XSS
session-cookie cross-site-scripting xss-attacks session-hijacking php
Language:PHP 28
J2TEAM / xss-me
A simple web application to learn about Cross-Site Scripting (XSS)
xss xss-poc cross-site-scripting security
Language:PHP 23
p4p1 / xss_bomb
A cross site scripting command and control notification server
xss javascript expo express android pentesting-tools webapplicationhacking penetration-testing-tools hacking-tools cross-site-scripting burp-collaborator-server
Language:JavaScript 22
michaeluno / php-simple-web-scraper
A PHP application which runs on Heroku and dumps web site outputs including JavaScript generated contents.
heroku scraper php phantomjs crowler proxy cross-site cross-domain cross-domain-request cross-domain-solution cross-origin cross-origin-resource-sharing web-scraper heroku-application cross-site-scripting
Language:PHP 21
humblelad / Awesome-XSS-Payloads
Exotic and uncommon XSS Vectors to hit the target as quickly as possible.
xss-vulnerability cross-site-scripting security-testing
20
fmereani / Cross-Site-Scripting-XSS
This project contains datasets for Cross Site Scripting (XSS), SQL, and LDAP injections. The project also contains the Matlab code for creating SVM, K-NN, Random Forest, and Neural Networks classifiers to detect Web applications attacks.
ml-classifier xss datasets xss-payloads ldap-injections sql-i cross-site-scripting
Language:MATLAB 19
dayeya / FinalWall
A Web application firewall to monitor, analyze and block traffic, built with Python
attacks-threats-vulnerabilites cybersecurity networking pydivert python cross-site-scripting csrf-protection file-inclusion sql-injection xss
Language:Python 18
OSTEsayed / OSTE-Vulnerable-Web-Application
Vulnerable Web application made with PHP/SQL designed to help new web testers gain some experience and test DAST tools for identifying web vulnerabilities. Containing some of the most well-known vulnerabilities such as SQL, cross-site scripting (XSS), OS command injections, our intention to expand more vulnerabilities for learning purposes.
cross-site-scripting cyber-security os-command-injection php sql sql-injection vulnerable-web-app web-security web-vulnerability xss-vulnerability
Language:PHP 15
Ronin
byt3n33dl3 / Ronin
🔱 Ronin the Shogun, WebApp parameter analysis and fuzzer for XSS and SSRF.
injection-attacks xss crlf ssrf cross-site-scripting cross-site-request-forgery ronin
Language:C 14
isira-adithya / xsspecter
A comprehensive toolkit for ethical security testing of Cross-Site Scripting (XSS) vulnerabilities. Features a CLI tool for automated payload spraying across web targets and a server component for callback handling with persistent storage, analytics dashboard, and multi-channel notifications.
cross-site-scripting ethical-hacking-tools web-security xss
Language:CSS 14
shreyaschavhan / xss
All About XSS
cross-site-scripting xss
14