ZephrFish/XSSPayloads external links

---

GitHub - View repository

GitHub.dev - Open in online code editor

Star history - Growth chart over time

deps.dev - Dependencies and security vulnerabilities

Gitingest - Export source code for LLM usage

Repomix - Export source code for LLM usage

uithub - Export source code for LLM usage

Close

ZephrFish/XSSPayloads

Readme badge preview -

If you own this repo, copy the snippet below and add it to your README.md

---

Copy

[![RelatedRepos](https://img.shields.io/badge/related-repos-yellow)](https://relatedrepos.com/gh/ZephrFish/XSSPayloads)

Close

ZephrFish / XSSPayloadsView on GitHubMore

• External links
• Readme badge

Cross Site Scripting Payloads -- Variations

☆72Apr 26, 2025Updated 11 months ago

Alternatives and similar repositories for XSSPayloads

Users that are interested in XSSPayloads are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.

• ZephrFish / XSS

  View on GitHub
  A collection of XSS Attack vectors
  ☆10Apr 26, 2025Updated 11 months ago
• ZephrFish / Blog_Backup

  View on GitHub
  A repository with various tutorials on how to do things in Pentesting, setup environments and other things
  ☆20Apr 26, 2025Updated 11 months ago
• xindongzhuaizhuai / awvs_script_decode

  View on GitHub
  ☆10Dec 19, 2017Updated 8 years ago
• Lonely-night / fastjson_gadgets_scanner

  View on GitHub
  ☆131Jun 17, 2022Updated 3 years ago
• vulhub / vulhub-ui

  View on GitHub
  [WIP] a simple UI for Vulhub
  ☆16Jun 10, 2021Updated 4 years ago
• Managed hosting for WordPress and PHP on Cloudways • Ad
  Managed hosting with the flexibility to host WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Cloudways by DigitalOcean.
• petercunha / jenkins-rce

  View on GitHub
  Jenkins RCE PoC. From unauthenticated user to remote code execution, it's a hacker's dream!
  ☆298Jun 10, 2019Updated 6 years ago
• mpgn / CVE-2019-0192

  View on GitHub
  RCE on Apache Solr using deserialization of untrusted data via jmx.serviceUrl
  ☆210Mar 10, 2019Updated 7 years ago
• vysecurity / VBA-RunPE

  View on GitHub
  A VBA implementation of the RunPE technique or how to bypass application whitelisting.
  ☆14Dec 30, 2018Updated 7 years ago
• ZephrFish / AttackDeploy

  View on GitHub
  Scripts for Deploying new server
  ☆49Apr 26, 2025Updated 11 months ago
• 0Kee-Team / JavaProbe

  View on GitHub
  A Java runtime information-gathering tool which uses the Java Attach API for information acquisition
  ☆204Apr 26, 2021Updated 4 years ago
• 3xp10it / paper

  View on GitHub
  ☆12Sep 27, 2018Updated 7 years ago
• ZephrFish / Lepus

  View on GitHub
  Subdomain finder
  ☆10Mar 13, 2025Updated last year
• l3m0n / vulenv

  View on GitHub
  漏洞测试环境 - 方便写扫描器利用复现
  ☆27Aug 12, 2019Updated 6 years ago
• allyshka / Rogue-MySql-Server

  View on GitHub
  MySQL fake server for read files of connected clients
  ☆606Jul 23, 2017Updated 8 years ago
• Open source password manager - Proton Pass • Ad
  Securely store, share, and autofill your credentials with Proton Pass, the end-to-end encrypted password manager trusted by millions.
• fumengze / rad_xray

  View on GitHub
  基于radium爬虫编写的批量任务处理脚本，使用进程池
  ☆13Aug 20, 2020Updated 5 years ago
• ZephrFish / bug-bounty-reference

  View on GitHub
  Inspired by https://github.com/djadmin/awesome-bug-bounty, a list of bug bounty write-up that is categorized by the bug nature
  ☆25Apr 19, 2017Updated 8 years ago
• feihong-cs / jre8u20_gadget

  View on GitHub
  jre8u20 gadget
  ☆34May 23, 2021Updated 4 years ago
• l3m0n / whatweb

  View on GitHub
  更快速的进行Web应用指纹识别
  ☆171May 9, 2019Updated 6 years ago
• verctor / nexus_rce_CVE-2019-7238

  View on GitHub
  Some debug notes and exploit(not blind)
  ☆39Jul 28, 2019Updated 6 years ago
• r35tart / Penetration_Testing_Case

  View on GitHub
  用于记录分享一些有趣的案例
  ☆865Jan 10, 2022Updated 4 years ago
• ttttmr / php-fpm

  View on GitHub
  用WebShell攻击PHP-FPM Attacking PHP-FPM with WebShell
  ☆41May 6, 2021Updated 4 years ago
• l3m0n / WebFuzzAttack

  View on GitHub
  web模糊测试 - 将漏洞可能性放大
  ☆145Apr 23, 2019Updated 6 years ago
• zema1 / ysoserial

  View on GitHub
  A proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization.
  ☆357Sep 20, 2022Updated 3 years ago
• DigitalOcean Gradient AI Platform • Ad
  Build production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
• welk1n / JNDI-Injection-Bypass

  View on GitHub
  Some payloads of JNDI Injection in JDK 1.8.0_191+
  ☆484Dec 9, 2020Updated 5 years ago
• guimaizi / get_domain

  View on GitHub
  ☆404Feb 28, 2020Updated 6 years ago
• 5alt / ultrarelay

  View on GitHub
  poison and relay NTLM credentials
  ☆176Nov 28, 2018Updated 7 years ago
• codeplutos / Conference

  View on GitHub
  ☆28Sep 11, 2019Updated 6 years ago
• tobechenghuai / Shiro_721_Padding_Oracle_RCE

  View on GitHub
  Shiro_721 exp 纯手工实现Padding Oracle整个过程
  ☆67Nov 20, 2019Updated 6 years ago
• m6a-UdS / ssrf-lab

  View on GitHub
  Lab for exploring SSRF vulnerabilities
  ☆247May 30, 2021Updated 4 years ago
• PeterMosmans / burp-extensions

  View on GitHub
  A small collection of Burp Suite extensions, written in Python
  ☆10Nov 19, 2016Updated 9 years ago
• fairyming / CVE-2020-9548

  View on GitHub
  CVE-2020-9548：FasterXML/jackson-databind 远程代码执行漏洞
  ☆24Mar 2, 2020Updated 6 years ago
• yzddmr6 / cmd2bx

  View on GitHub
  把jsp的cmdshell升级为冰蝎一句话
  ☆11Sep 23, 2019Updated 6 years ago
• NordVPN Threat Protection Pro™ • Ad
  Take your cybersecurity to the next level. Block phishing, malware, trackers, and ads. Lightweight app that works with all browsers.
• XalfiE / Oracle-EBS-Security-Audit

  View on GitHub
  Wordlist to get files/ folders listed by the app that may expose passwords, sensitive file or folders
  ☆22Jul 10, 2020Updated 5 years ago
• fate0 / prvd

  View on GitHub
  PHP Runtime Vulnerability Detection
  ☆480May 25, 2019Updated 6 years ago
• cornerpirate / nmap-summariser

  View on GitHub
  another nmap summarising script
  ☆26Oct 1, 2020Updated 5 years ago
• gitrobtest / Java-Security

  View on GitHub
  Java Security Documents
  ☆81Sep 19, 2019Updated 6 years ago
• TheKingOfDuck / easyXssPayload

  View on GitHub
  XssPayload List . Usage:
  ☆733Jan 15, 2020Updated 6 years ago
• DeborahN / Penetration-Testing-Methodology

  View on GitHub
  Penetration Testing Methodology - short notes
  ☆11May 30, 2015Updated 10 years ago
• Leskur / ddos

  View on GitHub
  ☆11Jul 8, 2021Updated 4 years ago