#Cross-site-scripting
Showing 16 of 16 repositories tagged #cross-site-scripting, ranked by stars
DOMPurify - a DOM-only, super-fast, uber-tolerant XSS sanitizer for HTML, MathML and SVG. DOMPurify works with a secure default, but offers a lot of configurability and hooks. Demo:
w3af: web application attack and audit framework, the open source web vulnerability scanner.
An XSS exploitation command-line interface and payload generator.
Tips on how to write exploit scripts (faster!)
bXSS is a utility which can be used by bug hunters and organizations to identify Blind Cross-Site Scripting.
Build Content-Security-Policy headers from a JSON file (or build them programmatically)
Egyscan The Best web vulnerability scanner; it's a multifaceted security powerhouse designed to fortify your web applications against malicious threats. Let's delve into the tasks and functions that make Egyscan an indispensable tool in your security arsenal:
Helios: Automated XSS Testing
this repository is a docker containing some "XSS vulnerability" challenges and bypass examples.
phpMyAdmin XSS
XsSCan | Web Application XSS Scanner | Coded By Sir.4m1R [Mr.Hidden]
NLP model and tech for cyber security tasks
Simple API for storing all incoming XSS requests and various XSS templates.
A comprehensive browser extension designed for authorized security testing and penetration testing activities. CyberInject provides quick access to common security payloads across multiple vulnerability categories.
🐞 Understand how cross-site scripting occurs, how to detect and exploit XSS vulnerabilities, giving you control of other visitor's browsers.
XSS, DOM Manipulation, Input Reflection — A complete step-by-step walkthrough of Google’s XSS Game demonstrating real-world cross-site scripting patterns, payload reasoning, and exploitation across all six levels.