xss-injection

🎯 Cross Site Scripting ( XSS ) Vulnerability Payload List

ezXSS is an easy way for penetration testers and bug bounty hunters to test (blind) Cross Site Scripting.

XssPayload List . Usage:

A tool to embed XXE and XSS payloads in docx, odt, pptx, xlsx files (oxml_xxe on steroids)

Xss Payload Generator ~ Xss Scanner ~ Xss Dork Finder

From XSS to RCE 2.75 - Black Hat Europe Arsenal 2017 + Extras

Solutions and write-ups from security-based competitions also known as Capture The Flag competition

NLP model and tech for cyber security tasks

Automated XSS Finder

DorkEye is a Python script for ethical dorking. The goal is to identify unintentionally exposed resources, such as sensitive files, login panels or indexed directories.

Foxss is a simple php based penetration Testing Tool.Currently it will help to find XSS vulnerability in websites.

The largest hacking program with new tools CVE-2023-PoC for the year 2023 It contains all the attack and exploitation tools for testing websites, as well as a graphical interface to facilitate its use for beginners

Scrippy is a browser extension that holds sql statements (think clip board) to aid devlopers in the testing of websites for basic code injections.

All Labs of the Security for Developers Training

An ongoing curated collection of awesome XSS software, libraries, frameworks, learning tutorials & practical resources cross-site scripting.

Cross-site scripting labs for web application security enthusiasts

An XSS reverse shell to control any website remotely using web sockets, along with an HTTP server to capture data

AUR beef-xss

Some vulnerables docker webapps

This is a repo of my solution of one XSS challenge website (http://sudo.co.il/xss/) . This challenges may have different types of solutions. My solutions are not the only one. So, keep searching & keep sharing.