xss-exploitation

There are 9 repositories under xss-exploitation topic.

payloadbox / xss-payload-list
🎯 Cross Site Scripting ( XSS ) Vulnerability Payload List
xss xss-payloads xss-vulnerability xss-exploitation xss-detection xss-attacks xss-scanner xss-injection xss-poc xss-scanners website-vulnerability cross-site-scripting reflected-xss-vulnerabilities dom-based self-xss websecurity payloads xss-payload payload bugbounty
7512
ssl / ezXSS
ezXSS is an easy way for penetration testers and bug bounty hunters to test (blind) Cross Site Scripting.
payload xss blind php test xss-vulnerability xss-exploitation xss-detection xss-attacks xss-injection xss-scanner blind-xss easy-to-use easy bug bugbounty penetration-testing alert redteam redteaming
Language:PHP 2117
toxssin
t3l3machus / toxssin
An XSS exploitation command-line interface and payload generator.
cross-site-scripting exploitation hacking javascript penetration-testing pentesting-tools python web-penetration-testing xss xss-exploitation xss-vulnerability
Language:Python 1356
n00py / WPForce
Wordpress Attack Suite
wordpress wordpress-attack hacking-tool pentest-tool reverse-shell keylogger php javascript xss-exploitation
Language:Python 973
shelld3v / JSshell
JSshell - JavaScript reverse/remote shell
python shell js javascript xss python3 hacking xss-exploitation blindxss security bugbounty pentest
Language:Python 619
ajinabraham / OWASP-Xenotix-XSS-Exploit-Framework
OWASP Xenotix XSS Exploit Framework is an advanced Cross Site Scripting (XSS) vulnerability detection and exploitation framework.
xss exploitation-framework xss-scanner xenotix xss-exploitation xss-detection dom-xss
Language:Python 534
kleiton0x00 / ppmap
A scanner/exploitation tool written in GO, which leverages client-side Prototype Pollution to XSS by exploiting known gadgets.
bug-bounty bugbounty bugbounty-tool cybersecurity infosec prototype-pollution xss xss-detection xss-exploitation xss-vulnerability
Language:Go 503
Varbaek / xsser
From XSS to RCE 2.75 - Black Hat Europe Arsenal 2017 + Extras
xss xss-exploitation xss-poc xss-injection xss-attacks
Language:Python 425
tegal1337 / 0l4bs
Cross-site scripting labs for web application security enthusiasts
bugbounty labs xss xss-exploitation xss-vulnerability
Language:PHP 310
raz-varren / xsshell
An XSS reverse shell framework
golang javascript reverse-shell xss xss-exploitation
Language:Go 306
Jewel591 / xssmap
XSSMap 是一款基于 Python3 开发用于检测 XSS 漏洞的工具
python3 xss xss-vulnerability xss-exploitation xss-detection xss-attacks xss-scanner pentesting penetration-testing sqlmap
Language:Python 263
shadow-workers / shadow-workers
Shadow Workers is a free and open source C2 and proxy designed for penetration testers to help in the exploitation of XSS and malicious Service Workers (SW)
c2 penetration-testing-tools proxy service-worker xss-exploitation
Language:JavaScript 231
doyensec / Session-Hijacking-Visual-Exploitation
Session Hijacking Visual Exploitation
appsec session-hijacking xss xss-exploitation
Language:JavaScript 197
ihebski / XSS-Payloads
Collection of XSS Payloads for fun and profit
bugbounty bughunter javascript payloads pentesting xss-exploitation xss-payloads
176
R0X4R / D4rkXSS
A list of useful payloads and Bypass for Web Application Security and Bug Bounty/CTF
bugbounty ethical-hacking xss-vulnerability xss-exploitation xss-filter hacking javascript bughunter bughunting
168
thenurhabib / collector
Collect XSS vulnerable parameters from entire domain.
crawler hacking-tool tools url vulnerability-scanner wayback-machine waybackurls xss xss-detection xss-exploitation xss-vulnerability
Language:Python 152
DenisPodgurskii / pentestkit
OWASP PTK - application security browser extension.
commandinjection dast jwt jwt-security owasp security sqlinjection xss xss-exploitation
Language:JavaScript 142
blackhatethicalhacking / XSSRocket
XSSRocket it is a tool designed for offensive security and XSS (Cross-Site Scripting) attacks.
bugbounty cybersecurity hacking infosec offensive penetration-testing pentesting xss xss-attacks xss-detection xss-exploitation xss-scanner xss-vulnerability
Language:Shell 132
moeinfatehi / xss_vulnerability_challenges
this repository is a docker containing some "XSS vulnerability" challenges and bypass examples.
application-security appsecurity infosec penetration-testing pentesting xss xss-attacks xss-detection xss-exploitation xss-filter xss-vulnerability cross-site-scripting input-validation owasp owasp-top-10 owasp-top-ten
Language:PHP 117
kagurazakasanae / SuperXSS
Make XSS Great Again
xss xss-exploitation websocket javascript php workerman
Language:PHP 90
rastating / xss-chef
A web application for generating custom XSS payloads
javascript penetration-testing react security websec xss xss-exploit xss-exploitation
Language:JavaScript 78
Err0r-ICA / SCANter
Websites Vulnerability Scanner
rce rce-exploit rce-scanner scanner server-side-template-injection sql-injection sql-scanner sqli ssti ssti-payloads xss xss-attacks xss-detection xss-exploitation xss-scanner xss-vulnerability
Language:Python 72
AXDOOMER / easy-xss-cookie-stealer
XSS cookie stealer using JavaScript and PHP
xss xss-attacks xss-exploitation xss-vulnerability
Language:HTML 66
1bitrs / alert-1-to-win
alert(1) to win payloads
xss xss-poc xss-exploitation payload
52
TalMaIka / Site-Scanner
Site-Scanner - Web application vulnerability assessment tool.
cms-detector cybersecurity-tools security-tools sqlinjection vulnerability-detection admin-login-detector attack-surface hacking-tools penetration-testing pentest-scripts security xss-exploitation
Language:Python 48
CrazyProger1 / Simple-XSS
Simple-XSS is a multiplatform cross-site scripting (XSS) vulnerability exploitation tool.
cli flet gui python web websockets xss xss-attacks xss-exploitation xss-vulnerability pentest pentesting jinja2 ngrok pydantic beef beef-analogue
Language:Python 46
thenurhabib / scancss
automatically crawl every URL and find cross site scripting (XSS)
bugbounty hacking linux termux xss xss-attacks xss-detection xss-exploitation xss-scanner xss-vulnerability
Language:Python 41
akalankauk / Foxss-XSS-Penetration-Testing-Tool
Foxss is a simple php based penetration Testing Tool.Currently it will help to find XSS vulnerability in websites.
foxss hacking-tool penetration php testing-tools xss xss-detection xss-exploitation xss-injection
Language:JavaScript 35
Esonhugh / ProxyInBrowser
Open Source XSS exploitation tool. using http proxy to access the browser which executed js. [Engineering Experimental]
browser cors-proxy golang hacktool http-proxy mitm mitmproxy proxy-server tools typescript xss xss-exploitation
Language:Go 29
farinap5 / webpwn
Web Vulnerability Detector (XSS,SQL,LFI,XST,WAF)
xss-exploitation xss-vulnerability xss-detection xss-attacks sqlinjection sqli-vulnerability-scanner sqli-pentester python pentesting lfi lfi-exploitation waf-detection xst webpwn
Language:Python 26
redcode-labs / poXSSon
A framework for easy payloads development and deployment, collection of customizable XSS payloads
python tool xss xss-attacks xss-exploitation
Language:Python 26
TheWation / PythonCookieStealer
The Python cookie stealer is a tool that can be used in penetration testing and XSS attacks to steal browser cookies from victims.
xss xss-exploitation xss-vulnerability
Language:Python 25
Ak-wa / XSSRecon
XSSRecon - Reflected XSS Scanner
cross-site-scripting kali-linux kali-scripts linux python3 scanner-web xss-exploitation xss-scanner
Language:Python 24
fagun18 / web-vulnerability
Web Vulnerability Scanning and Exploitation Script
exploitation mejbaur-bahar-fagun sql-injection sql-injection-attacks sql-injection-exploitation vulnerability-detection vulnerability-scanners xss-detection xss-exploitation xss-scanner xss-vulnerability
Language:Python 23
UbuntuStrike / CookieStealer.php
A PHP script to run on your server to grab cookies through xss
cookiejar cookies cookiesession pentesting php7 redteam xss xss-exploitation xss-vulnerability
Language:PHP 23
omurugur / XSS_Payload_List
Cross Site Scripting ( XSS ) Vulnerability Payload List
xss xss-vulnerability xss-exploitation xss-payloads vulnerability attacks scanner pentesting malicious-scripts vulnerability-payload injection attacker flaws
22