Alternatives and similar repositories for Excess-XSS

Users that are interested in Excess-XSS are comparing it to the libraries listed below

• dxa4481 / cssInjection
  Stealing CSRF tokens with CSS injection (without iFrames)
  ☆323Updated 7 years ago
• Nhoya / PastebinMarkdownXSS
  XSS in pastebin.com and reddit.com via unsanitized markdown output
  ☆87Updated 7 years ago
• wireghoul / sploit-dev
  Exploits and research stuffs
  ☆55Updated 2 years ago
• tomsteele / burpbuddy
  burpbuddy exposes Burp Suites's extender API over the network through various mediums, with the goal of enabling development in any langu…
  ☆157Updated 6 years ago
• infosec-au / websec-weekly
  The databases, API's and managers behind https://websecweekly.org
  ☆50Updated 10 years ago
• skepticfx / damnvulnerable.me
  A deliberately vulnerable modern day app with lots of DOM related bugs
  ☆35Updated 6 years ago
• bkimminich / webappsec-nutshell
  An ultra-compact intro (or refresher) to Web Application Security.
  ☆32Updated 7 years ago
• dxa4481 / Damn-Vulnerable-Redis-Container
  An example of obtaining RCE via Redis and CSRF
  ☆76Updated 9 years ago
• avicoder / spoodle
  A mass subdomain (Subbrute) + poodle vulnerability scanner
  ☆75Updated 6 years ago
• tomsteele / burpstaticscan
  Use burp's JS static code analysis on code from your local system.
  ☆42Updated 8 years ago
• hadynz / xss-keylogger
  A keystroke logger to exploit XSS vulnerabilities in a site - for my personal Educational purposes only
  ☆168Updated 3 years ago
• koto / mosquito
  XSS exploitation tool - access victims through HTTP proxy
  ☆160Updated 11 years ago
• Matir / pwnableweb
  PwnableWeb is a suite of web applications for use in information security training.
  ☆87Updated 11 years ago
• chrisallenlane / watchtower
  Watchtower is a Static Code Analysis tool designed to assist security auditors who are tasked with performing manual code reviews. It is …
  ☆110Updated 8 years ago
• evilpacket / xss.io
  ☆73Updated 12 years ago
• dxa4481 / windowHijacking
  A demo of altering an opened tab after a timer
  ☆123Updated 9 years ago
• cure53 / jPurify
  jPurify
  ☆64Updated 8 years ago
• infosec-au / bugbountydash
  [depreciated] Terminal dashboard for bug bounty hunters that use HackerOne and Bugcrowd
  ☆195Updated 9 years ago
• jkingsman / bishop
  Hunt for vulnerable websites as you browse.
  ☆132Updated 8 years ago
• praetorian-inc / hashcatJS
  An implementation of the hashcat rules engine in javascript
  ☆49Updated 7 years ago
• markclayton / bumpster
  The Unofficial Burp Extension for DNSDumpster.com
  ☆70Updated 7 years ago
• infosec-au / little-doctor
  🔥🔥🔥 Out of the Browser into the Fire - Cross platform XSS worm framework 🔥🔥🔥
  ☆134Updated 8 years ago
• incredibleindishell / Local-file-disclosure-SQL-Injection-Lab
  This is sample code to demonstrate how one can use SQL Injection vulnerability to download local file from server in specific condition. …
  ☆42Updated 8 years ago
• melvinsh / vcsmap
  vcsmap is a plugin-based tool to scan public version control systems for sensitive information.
  ☆142Updated 4 years ago
• SecarmaLabs / dns-parallel-prober
  PoC for an adaptive parallelised DNS prober
  ☆44Updated 7 years ago
• MalQR / MalQR.github.io
  MalQR is a collection of malicious QR Codes and Barcodes you can use to test the security of your scanners.
  ☆124Updated last year
• cure53 / PastePurify
  This is a tiny Chrome Extension that protects your from Clipboard XSS Attacks
  ☆19Updated 10 years ago
• aemkei / katakana.js
  Write JavaScript alert(1) with Katakana characters only
  ☆146Updated 8 years ago
• gabemarshall / casperXSS
  Reflective/DOM XSS scanner built on casperJS
  ☆81Updated 10 years ago
• wick2o / gitDigger
  ☆179Updated 11 years ago