🎯 Cross Site Scripting ( XSS ) Vulnerability Payload List
翻译 - 🎯跨站点脚本（XSS）漏洞有效负载列表
ezXSS is an easy way for penetration testers and bug bounty hunters to test (blind) Cross Site Scripting.
翻译 - ezXSS是渗透测试人员和漏洞赏金猎人测试（盲目）跨站点脚本的一种简便方法。
An XSS exploitation command-line interface and payload generator.
#安全#MagicRecon is a powerful shell script to maximize the recon and data collection process of an objective and finding common vulnerabilities, all this saving the results obtained in an organized way in ...
XssPayload List . Usage:
翻译 - Xss有效负载列表。用法：
#夺旗赛 (CTF) 和网络安全资源#swiss army knife for hackers
翻译 - 瑞士军刀黑客
A scanner/exploitation tool written in GO, which leverages client-side Prototype Pollution to XSS by exploiting known gadgets.
翻译 - 一个用 GO 编写的扫描器/漏洞利用工具，它通过利用已知的小工具来利用 Prototype Pollution to XSS。
#安全#Another web vulnerabilities scanner, this extension works on Chrome and Opera
JAVA 漏洞靶场 (Vulnerability Environment For Java)
#安全#OWASP Vulnerable Web Application Project https://github.com/hummingbirdscyber
Automating XSS using Bash
XRCross is a Reconstruction, Scanner, and a tool for penetration / BugBounty testing. This tool was built to test (XSS|SSRF|CORS|SSTI|IDOR|RCE|LFI|SQLI) vulnerabilities
#夺旗赛 (CTF) 和网络安全资源#Cross-site scripting labs for web application security enthusiasts
翻译 - Web应用程序安全爱好者的跨站点脚本实验室
Demo of a Vue.js app that mixes both clientside templates and serverside templates leading to an XSS vulnerability
XSSMap 是一款基于 Python3 开发用于检测 XSS 漏洞的工具
Automation tool to testing and confirm the xss vulnerability.
DOMXSS Scanner is an online tool to scan source code for DOM based XSS vulnerabilities
A list of useful payloads and Bypass for Web Application Security and Bug Bounty/CTF
#网络爬虫#Collect XSS vulnerable parameters from entire domain.