A list of useful payloads and bypass for Web Application Security and Pentest/CTF

🎯 Cross Site Scripting ( XSS ) Vulnerability Payload List

ezXSS is an easy way for penetration testers and bug bounty hunters to test (blind) Cross Site Scripting.

XssPayload List . Usage:

🌘🦊 DalFox(Finder Of XSS) / Parameter Analysis and XSS Scanning tool based on golang

Demo of a Vue.js app that mixes both clientside templates and serverside templates leading to an XSS vulnerability

Another web vulnerabilities scanner, this extension works on Chrome and Opera

DOMXSS Scanner is an online tool to scan source code for DOM based XSS vulnerabilities

XRCross is a Reconstruction, Scanner, and a tool for penetration / BugBounty testing. This tool was built to test (XSS|SSRF|CORS|SSTI|IDOR|RCE|LFI|SQLI) vulnerabilities

XSSMap 是一款基于 Python3 开发用于检测 XSS 漏洞的工具

PwnXSS: Vulnerability (XSS) scanner exploit

OWASP Vulnerable Web Application Project https://github.com/hummingbirdscyber

Cross-site scripting labs for web application security enthusiasts

A list of useful payloads and Bypass for Web Application Security and Bug Bounty/CTF

XSS Payload without Anything.

XsSCan | Web Application XSS Scanner | Coded By Sir.4m1R [Mr.Hidden]

Light weight library for Filter the Cross-site scripting in request For Spring Framwork / Spring-Boot, logic can be use for servlet based(without using spring framework) application

XSS Cheatsheet - A collection of XSS attack vectors https://xss.devwerks.net/

Deliberately vulnerable scripts for Web Security training

Repository contains an online education portal filled with web vulnerabilities.

Exploiting stored XSS vulnerability to hijack sessions

XSS cookie stealer using JavaScript and PHP

Not just another XSS tool

Everything about xss protection technology

[ Automated Web Vulnerability Scanner ]

Research based Hybrid Scanner to detect various SQL, JavaScript and XSS vulnerabilities

Cross-Site Scripting (XSS) scanner. This tool helps to find possible XSS vulnerabilities. Cross platform - macOS, Linux, and Windows.

A PHP script to run on your server to grab cookies through xss

Allow you to make your site prevent from the XSS Vulnerability