xss-vulnerability

There are 18 repositories under xss-vulnerability topic.

• payloadbox / xss-payload-list

  🎯 Cross Site Scripting ( XSS ) Vulnerability Payload List

  bugbountycross-site-scriptingdom-basedpayloadpayloadsreflected-xss-vulnerabilitiesself-xsswebsecuritywebsite-vulnerabilityxssxss-attacksxss-detectionxss-exploitationxss-injectionxss-payloadxss-payloadsxss-pocxss-scannerxss-scannersxss-vulnerability
  7684

• ssl / ezXSS

  ezXSS is an easy way for penetration testers and bug bounty hunters to test (blind) Cross Site Scripting.

  payloadxssblindphptestxss-vulnerabilityxss-exploitationxss-detectionxss-attacksxss-injectionxss-scannerblind-xsseasy-to-useeasybugbugbountypenetration-testingalertredteamredteaming
  Language:PHP 2181
• toxssin

  t3l3machus / toxssin

  An XSS exploitation command-line interface and payload generator.

  cross-site-scriptingexploitationjavascriptpenetration-testingpentesting-toolspythonweb-penetration-testingxss-exploitationxss-vulnerabilityhackingxss
  Language:Python 1399
• magicRecon

  robotshell / magicRecon

  MagicRecon is a powerful shell script to maximize the recon and data collection process of an objective and finding common vulnerabilities, all this saving the results obtained in an organized way in directories and with various formats.

  subdomainbugbugbounty-toolbugbountyvulnerability-scannersscannertoolinfosecbugbountytricksbash-scriptsubdomains-enumerationxss-vulnerabilitysql-injectionnuclei
  Language:Shell 1017

• pwn0sec / PwnXSS

  PwnXSS: Vulnerability (XSS) scanner exploit

  xss-scannerxss-vulnerability
  Language:Python 805

• TheKingOfDuck / easyXssPayload

  XssPayload List . Usage:

  xssxsspayloadxss-pocxss-vulnerabilityxss-injection
  Language:Python 731

• abhisharma404 / vault

  swiss army knife for hackers

  crawlerfuzzinghackinghacking-toolinformation-gatheringlfinetworkingoffensive-securityosintpentestingport-scannerpythonrfiscannerscrapysecuritysqlitessl-inspectionvaultxss-vulnerability
  Language:Python 535

• kleiton0x00 / ppmap

  A scanner/exploitation tool written in GO, which leverages client-side Prototype Pollution to XSS by exploiting known gadgets.

  prototype-pollutionbugbountycybersecuritybug-bountybugbounty-toolxssxss-vulnerabilityinfosecxss-exploitationxss-detection
  Language:Go 514

• tangxiaofeng7 / SecExample

  JAVA 漏洞靶场 (Vulnerability Environment For Java)

  dockerjavaspringbootxss-vulnerabilityvulnerabilityssrfrcefastjsoncorssqlinjectioncsrf
  Language:HTML 474

• swisskyrepo / DamnWebScanner

  Another web vulnerabilities scanner, this extension works on Chrome and Opera

  sql-injectionpolyglot-vectorweb-vulnerabilities-scannerpluginextensionwebbrowserxss-vulnerabilityrcelfiscans
  Language:Python 462

• OWASP / Vulnerable-Web-Application

  OWASP Vulnerable Web Application Project https://github.com/hummingbirdscyber

  vulnerable-web-appwebphpsql-injectionxss-vulnerabilitycommand-executionfile-uploaddirectory-traversalxsssql
  Language:PHP 396

• theinfosecguy / QuickXSS

  Automating XSS using Bash

  bash-scriptbugbountyhacktoberfesthacktoberfest2021xssxss-detectionxss-vulnerability
  Language:Shell 357

• pikpikcu / XRCross

  XRCross is a Reconstruction, Scanner, and a tool for penetration / BugBounty testing. This tool was built to test (XSS|SSRF|CORS|SSTI|IDOR|RCE|LFI|SQLI) vulnerabilities

  bugbountybugbounty-toolxss-vulnerabilityssrfxss-scannersubdomain-enumerationtakeover-subdomainrcesqlicorslfireconscannerscheck-subdomainscors-scanner
  Language:Shell 344

• tegal1337 / 0l4bs

  Cross-site scripting labs for web application security enthusiasts

  bugbountylabsxssxss-exploitationxss-vulnerability
  Language:PHP 321

• dotboris / vuejs-serverside-template-xss

  Demo of a Vue.js app that mixes both clientside templates and serverside templates leading to an XSS vulnerability

  xssxss-vulnerabilityvuejs2vuevuejsvue2security
  Language:PHP 302

• iamunixtz / LazyXss

  Automation tool to testing and confirm the xss vulnerability.

  lazyxsslazyxsstoolxssxss-detectionxss-payloadsxss-scannerxss-vulnerabilityxsslazytool
  Language:Python 291

• Jewel591 / xssmap

  XSSMap 是一款基于 Python3 开发用于检测 XSS 漏洞的工具

  python3xssxss-vulnerabilityxss-exploitationxss-detectionxss-attacksxss-scannerpentestingpenetration-testingsqlmap
  Language:Python 268
• domxssscanner

  yaph / domxssscanner

  DOMXSS Scanner is an online tool to scan source code for DOM based XSS vulnerabilities

  domdomxssonline-toolscannerweb-securityxss-vulnerability
  Language:HTML 194

• R0X4R / D4rkXSS

  A list of useful payloads and Bypass for Web Application Security and Bug Bounty/CTF

  bugbountyethical-hackingxss-vulnerabilityxss-exploitationxss-filterhackingjavascriptbughunterbughunting
  168

• thenurhabib / collector

  Collect XSS vulnerable parameters from entire domain.

  wayback-machinewaybackurlsxssxss-vulnerabilityxss-exploitationxss-detectionhacking-tooltoolsurlcrawlervulnerability-scanner
  Language:Python 153

• blackhatethicalhacking / XSSRocket

  XSSRocket it is a tool designed for offensive security and XSS (Cross-Site Scripting) attacks.

  bugbountycybersecurityhackinginfosecoffensivepenetration-testingpentestingxssxss-attacksxss-detectionxss-exploitationxss-scannerxss-vulnerability
  Language:Shell 147

• MariaGarber / XSS-Scanner

  XSS scanner that detects Cross-Site Scripting vulnerabilities in website by injecting malicious scripts

  xssscannerxss-vulnerabilitypuppeteerjavascriptinjection
  Language:JavaScript 124

• moeinfatehi / xss_vulnerability_challenges

  this repository is a docker containing some "XSS vulnerability" challenges and bypass examples.

  application-securityappsecurityinfosecpenetration-testingpentestingxssxss-attacksxss-detectionxss-exploitationxss-filterxss-vulnerabilitycross-site-scriptinginput-validationowaspowasp-top-10owasp-top-ten
  Language:PHP 117

• hahwul / XSS-Payload-without-Anything

  XSS Payload without Anything.

  awesomebugbountybypass-xsshackinghahwulpayloadssecurityxssxss-vulnerability
  107

• The404Hacking / XsSCan

  XsSCan | Web Application XSS Scanner | Coded By Sir.4m1R [Mr.Hidden]

  the404hackingxssscanxssscanscannersecuritysecurity-scannerxss-vulnerabilitysubdomainhackingpythoncross-site-scripting
  Language:Python 86

• R0X4R / Pinaak

  A vulnerability fuzzing tool written in bash, it contains the most commonly used tools to perform vulnerability scan

  bash-scriptbugbountyfastscannerfind-vulnerabilitiesnucleisqlinjectionvulnerabilitiesvulnerability-scannersxss-vulnerability
  Language:Shell 79

• yangr0 / RVuln

  [ Automated Web Vulnerability Scanner ]

  hackinghacking-toolrustrust-langsecuritysecurity-toolsvulnerabilitiesvulnerability-scannersvulnerability-scanningwebweb-scannerxssxss-vulnerability
  Language:Rust 74

• Err0r-ICA / SCANter

  Websites Vulnerability Scanner

  rcerce-exploitrce-scannerscannerserver-side-template-injectionsql-injectionsql-scannersqlisstissti-payloadsxssxss-attacksxss-detectionxss-exploitationxss-scannerxss-vulnerability
  Language:Python 73

• AXDOOMER / easy-xss-cookie-stealer

  XSS cookie stealer using JavaScript and PHP

  xssxss-vulnerabilityxss-exploitationxss-attacks
  Language:HTML 68

• MrPr0fessor / Google-Dorks-for-Cross-site-Scripting-XSS

  Cross-Site Scripting (XSS) injects malicious scripts into trusted websites via user input. Attacker-sent scripts run in users' browsers, accessing sensitive data, cookies, and even altering HTML content. Widespread due to input validation lapses.

  cross-site-scriptingcybercyber-securityethical-hacking-toolsgoogle-dorkspenetration-testing-toolsvulnerability-assessmentvulnerability-detectionvulnerability-scannersweb-application-securityweb-penetration-testingxssxss-payloadxss-payloadsxss-vulnerabilityfind-xss
  61

• Charmve / PyStegosploit

  PoC - Exploit Delivery via Steganography and Polyglots, CVE-2014-0282

  exploitssteganographydecoderjpg-html-polyglotjpgjpegcvehtml-png-polyglotencoded-imagesbrowser-exploitsstegoxss-vulnerabilitypocexpcharmve
  Language:HTML 53

• seanmarpo / webjars-swagger-xss

  PoC for XSS in org.webjars:swagger-ui [3.14.2, 3.36.2]

  xssxss-pocxss-vulnerability
  Language:Kotlin 53

• x1337loser / bug-bounty-writeup

  This repo contains different variants of Bug Bounty & Security & Pentest & Tech related Articles

  bug-bountybugbountybugbountytipsbugreporthackingidor-attackvulnerabilitiesvulnerabilitywriteupsxss-vulnerability
  48

• CrazyProger1 / Simple-XSS

  Simple-XSS is a multiplatform cross-site scripting (XSS) vulnerability exploitation tool.

  clifletguipythonwebwebsocketsxssxss-attacksxss-exploitationxss-vulnerabilitypentestpentestingjinja2ngrokpydanticbeefbeef-analogue
  Language:Python 47

• n4itr0-07 / SecToolkit

  Welcome SecToolkit repository! This is a comprehensive collection of cybersecurity and bug bounty hunting topics. Here, you'll find a variety of resources, notes, and practical projects aimed at enhancing knowledge and skills in identifying and mitigating security vulnerabilities.

  bugbountybugbounty-writeupsbugbountyroadmapcommandinjectioncryptographycybersecurity-educationenumerationfuzzingidornetcatnmapowasp-top-10penetration-testingpython3reconnaissancerequestsmugglingsqlinjectionxss-vulnerability
  47

• techguy-bhushan / XssRequestFilters

  Light weight library for Filter the Cross-site scripting in request For Spring Framwork / Spring-Boot, logic can be use for servlet based(without using spring framework) application

  spring-bootspring-mvcspring-restxssxss-attacksxss-filterxss-scannersxss-vulnerability
  Language:Java 46