🎯 Cross Site Scripting ( XSS ) Vulnerability Payload List

ezXSS is an easy way for penetration testers and bug bounty hunters to test (blind) Cross Site Scripting.

🕷️ XSS Listener is a penetration tool for easy to steal data with various XSS.

From XSS to RCE 2.75 - Black Hat Europe Arsenal 2017 + Extras

㊙️ AntiXSS | Protection against Cross-site scripting (XSS) via PHP

Xss Payload Generator ~ Xss Scanner ~ Xss Dork Finder

A python flask app that is purposefully vulnerable to SQL injection and XSS attacks. To be used for demonstrating attacks

A few SQL and XSS attack tools

Light weight library for Filter the Cross-site scripting in request For Spring Framwork / Spring-Boot, logic can be use for servlet based(without using spring framework) application

XSS 跨窗口劫持

✈️ An enterprise level Flight Booking System for Turkish Airlines (web-application) based on the Model View Controller (MVC) Architecture made using Java Servlets, Java Server Pages (JSPs). Moreover authentication and authorization for users is implemented. The web-application is also secured against SQL Injection and Cross-Site Scripting attacks.

Build XSS is a Semi-Automatic XSS Payload Generator.

CheckXSS 是一款基于 Python3 开发用于检测 XSS 漏洞的工具

XSS cookie stealer using JavaScript and PHP

PHP Cookie Stealing Scripts for use in XSS

Exploiting stored XSS vulnerability to hijack sessions

A project to filter SQL Injection and XSS attacks using ANN -- in Ruby

XSS Bypass techniquies

Detector of DOM based XSS

Xssing is a simple semantic analysis based on the location of the vulnerability, to determine the existence of the vulnerability, and use chromium to verify that xss is existed.

This repository is a collection of Awesome XSS Payloads in 1 txt file

🔐 basics on making php applications secure

XSS-CTF 一个练习和入门的XSS平台

Web Application Penetration Testing tools and Materials for Ethical Hackers.

Detection, Classification and Prevention of SQLi and XSS attacks on a Java WebApp

A online wordpress xss maker , only wordpress version 3.xx

A javascript library to display warning aginst self XSS attacks