DOMPurify - a DOM-only, super-fast, uber-tolerant XSS sanitizer for HTML, MathML and SVG. DOMPurify works with a secure default, but offers a lot of configurability and hooks. Demo:

🎯 Cross Site Scripting ( XSS ) Vulnerability Payload List

Toolset for detecting reflected xss in websites

Deep Security's APIs make it simple to integration with a variety of AWS Services

XsSCan | Web Application XSS Scanner | Coded By Sir.4m1R [Mr.Hidden]

A simple web application to learn about Cross-Site Scripting (XSS)

Replicating various security and privacy related exploits related to Memory, Web and Network

A PHP application which runs on Heroku and dumps web site outputs including JavaScript generated contents.

XSSRecon - Reflected XSS Scanner

PHP Cookie Stealing Scripts for use in XSS

quickly detects OWASP top 10 vulnerabilities in your current tab

Injects a trusted types policy into an HTML page to log all DOM sinks whenever HTML is written into the DOM.

We are going to go through some techniques and common PHP use cases for Website Security. Website security is often overlooked- and that’s understandable, but basic security can be put down to lots of techniques.

💬 XSS classification model - Types of Cross-Site Scripting

🗒️ A presentation about XSS classification model - Types of XSS evolution

A simple script to detect unescaped characters in a web application for e.g. Cross Site Scripting (XSS) attacks.

Simple API for storing all incoming XSS requests.

Secure login authentication and comment prevention from Cross site scripting ,SQL INJECTION , and session hijacking

Exotic and uncommon XSS Vectors to hit the target as quickly as possible.

Implementation for sqlinjection, cross-side-scripting and phising(gmail) attacks. [Hobby Project 2017]

This project contains datasets for Cross Site Scripting (XSS), SQL, and LDAP injections. The project also contains the Matlab code for creating SVM, K-NN, Random Forest, and Neural Networks classifiers to detect Web applications attacks.

Given some data, js-char-escape returns a stringified representation of that data to help prevent XSS/ Cross-site_Scripting Attacks in your application). js-char-escape is a fork of jsesc with a few additions such as exclude & excludeAccented.

Ejemplo de vulnerabilidad: A7 - Secuencia de Comandos en Sitios Cruzados (XSS) según OWASP TOP 10 2017

Presentation with reveal.js about xss

Some Shell Scripts for System Exploitation