Cross Site Scripting Collection

◆

◆

◆

◆

⚡Electric

★★★

“DOMPurify - a DOM-only, super-fast, uber-tolerant XSS sanitizer for HTML, MathML and SVG. DOMPurify works with a secure default, but offers a lot of configurability and hooks. Demo:”

◆

◆

◆

◆

🔮Psychic

★★

“w3af: web application attack and audit framework, the open source web vulnerability scanner.”

◆

◆

◆

◆

🔮Psychic

★★

“An XSS exploitation command-line interface and payload generator.”

◆

◆

◆

◆

📦Normal

★★

“Tips on how to write exploit scripts (faster!)”

◆

◆

◆

◆

⚡Electric

★★

“bXSS is a utility which can be used by bug hunters and organizations to identify Blind Cross-Site Scripting.”

◆

◆

◆

◆

☠️Poison

★★

“Build Content-Security-Policy headers from a JSON file (or build them programmatically)”

◆

◆

◆

◆

🌊Water

★

“Blind XSS Scanner is a tool that can be used to scan for blind XSS vulnerabilities in web applications.”

◆

◆

◆

◆

☠️Poison

★

“An XSS Exploitation Tool”

◆

◆

◆

◆

🔮Psychic

★

“Egyscan The Best web vulnerability scanner; it's a multifaceted security powerhouse designed to fortify your web applications against malicious threats. Let's delve into the tasks and functions that make Egyscan an indispensable tool in your security arsenal:”

◆

◆

◆

◆

🔮Psychic

★

“Helios: Automated XSS Testing”

◆

◆

◆

◆

⚡Electric

★

“xss-payload-list”

◆

◆

◆

◆

☠️Poison

★

“this repository is a docker containing some "XSS vulnerability" challenges and bypass examples.”

◆

◆

◆

◆

🔮Psychic

★

“Toolset for detecting reflected xss in websites”

◆

◆

◆

◆

📦Normal

★

“phpMyAdmin XSS ”

◆

◆

◆

◆

⚡Electric

★

“FrogPost: postMessage Security Testing Tool”

◆

◆

◆

◆

🔮Psychic

★

“XsSCan | Web Application XSS Scanner | Coded By Sir.4m1R [Mr.Hidden]”

◆

◆

◆

◆

📦Normal

★

“NLP model and tech for cyber security tasks”

◆

◆

◆

◆

📦Normal

★

“Cross-Site Scripting (XSS) injects malicious scripts into trusted websites via user input. Attacker-sent scripts run in users' browsers, accessing sensitive data, cookies, and even altering HTML content. Widespread due to input validation lapses.”