xss-injection

ezXSS is an easy way for penetration testers and bug bounty hunters to test (blind) Cross Site Scripting.

XssPayload List . Usage:

A tool to embed XXE and XSS payloads in docx, odt, pptx, xlsx files (oxml_xxe on steroids)

Xss Payload Generator ~ Xss Scanner ~ Xss Dork Finder

From XSS to RCE 2.75 - Black Hat Europe Arsenal 2017 + Extras

Solutions and write-ups from security-based competitions also known as Capture The Flag competition

NLP model and tech for cyber security tasks

Automated XSS Finder

Foxss is a simple php based penetration Testing Tool.Currently it will help to find XSS vulnerability in websites.

The largest hacking program with new tools CVE-2023-PoC for the year 2023 It contains all the attack and exploitation tools for testing websites, as well as a graphical interface to facilitate its use for beginners

🛠️ Ultimate browser hacking & inspection suite – Tampermonkey userscript with spoofing, XSS, password manager, request modifier, canvas fingerprint defender, DOM monitor, split‑view AI launcher, and more. Persian/English, mobile ready.

Scrippy is a browser extension that holds sql statements (think clip board) to aid devlopers in the testing of websites for basic code injections.

XSplit Craft

All Labs of the Security for Developers Training

An XSS reverse shell to control any website remotely using web sockets, along with an HTTP server to capture data

Cross-site scripting labs for web application security enthusiasts

An ongoing curated collection of awesome XSS software, libraries, frameworks, learning tutorials & practical resources cross-site scripting.

Modern XSS vulnerability scanner for real-world web applications.

Some vulnerables docker webapps

This is a repo of my solution of one XSS challenge website (http://sudo.co.il/xss/) . This challenges may have different types of solutions. My solutions are not the only one. So, keep searching & keep sharing.