Cross-Site Scripting (XSS) is a common vulnerability that allows attackers to inject malicious scripts into web pages viewed by users. In response, many websites use filtering techniques and firewalls to block these malicious scripts. However, sophisticated attackers can bypass these filters by using various encoding techniques
☆11Sep 10, 2024Updated 2 years ago
Alternatives and similar repositories for XSS-Payloads-for-Bypassing-Filters-and-Firewalls
Users that are interested in XSS-Payloads-for-Bypassing-Filters-and-Firewalls are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- This vulnerability could allow an attacker to take complete control of a vulnerable Confluence server. This could allow the attacker to s…☆11May 24, 2024Updated 2 years ago
- ☆16May 17, 2024Updated 2 years ago
- CVE-2024-44000 is a vulnerability in the LiteSpeed Cache plugin, a popular WordPress plugin. This vulnerability affects session managemen…☆16Sep 6, 2024Updated 2 years ago
- Proof of Concept (PoC) for CVE-2024-7014 (EvilVideo) Exploit☆12Mar 17, 2025Updated last year
- CVE-2024-30056 Microsoft Edge (Chromium-based) Information Disclosure Vulnerability☆17May 27, 2024Updated 2 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Argument injection vulnerability in PHP☆11Jun 15, 2024Updated 2 years ago
- Multi-agent AI system using GPT-4o, DeepSeek v3, and Llama 3.3 to detect if CVE vulnerabilities were exploited as zero-days. Analyzes…☆21Feb 13, 2026Updated 8 months ago
- The authentication bypass vulnerability in GitHub Enterprise Server (GHES) allows an unauthorized attacker to access an instance of GHES …☆51May 21, 2024Updated 2 years ago
- Advanced XSS covers techniques to bypass modern web security measures like blacklists, filters, and Content Security Policy (CSP). It foc…☆24Mar 6, 2026Updated 8 months ago
- CVE-2025-6218 is a directory traversal vulnerability in WinRAR that allows an attacker to place files outside the intended extraction dir…☆19Jul 10, 2025Updated last year
- To use hackJS, specify a target URL that contains JavaScript files you want to analyze. The tool will fetch these JavaScript files, extra…☆20Jun 19, 2025Updated last year
- Static analysis tool to Identify and Fix GitHub Actions prone to Supply‑Chain Risks☆15Oct 10, 2026Updated 3 weeks ago
- ☆24Sep 25, 2025Updated last year
- PHP RCE PoC for CVE-2024-4577 written in bash, go, python and a nuclei template☆33Jul 30, 2026Updated 3 months ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- Ps4 Pkg Downgrade Tools Gui☆12Aug 4, 2020Updated 6 years ago
- Bug Bounty ultimate tool☆29Jun 28, 2026Updated 4 months ago
- CORS Exploit POC for WordPress REST API☆11Oct 27, 2024Updated 2 years ago
- PHP Scripts for SSH Bruteforce☆10May 13, 2022Updated 4 years ago
- ☆11Mar 1, 2025Updated last year
- Chat GPT translator☆10Feb 20, 2023Updated 3 years ago
- ☆10Jan 13, 2025Updated last year
- Log all keyboard and terminal input/output for any app 记录任意程序的键盘输入和终端输入输出☆25Jul 14, 2026Updated 3 months ago
- 基于 Vue + SpringBoot 构建的前后端分离的 Java 安全靶场。☆16Oct 23, 2026Updated 2 weeks ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- DsSScan — is a tool for scanning directories contained in .DS_Store files used on websites. It extracts information about the directory s…☆10Jan 27, 2025Updated last year
- ☆12Updated this week
- 一款src捡洞扫描器☆26Jan 13, 2021Updated 5 years ago
- Community resources☆13Jun 4, 2021Updated 5 years ago
- ## 𝐓𝐇𝐀𝐍𝐊𝐒 𝐅𝐎𝐑 𝐀𝐋𝐋❤️ ### 𝐍𝐄𝐖 𝐂𝐀𝐓𝐁𝐎𝐓 .. ## ʙᴏᴛ ɪs ᴡᴏʀᴋɪɴɢ ᴏʀ ɴᴏᴛ ``` 💝𝗖𝗔𝗧𝗕𝗢𝗧 𝗪𝗢𝗥𝗞𝗜𝗡𝗚 ``` <div align=…☆13Mar 9, 2022Updated 4 years ago
- Various ways to send SMS messages via an Android device connected over ADB ⭐️☆13Mar 4, 2026Updated 8 months ago
- Android Debug Bridge☆10Nov 29, 2024Updated last year
- WhiteURLScan 是一款功能强大且高效的网站 URL 扫描与信息采集工具，旨在帮助用户快速、安全地扫描和采集网站信息。它支持多线程并发扫描、递归爬取、自动拼接、敏感信息检测、外部 URL 收集等多种功能，广泛应用于安全测试、信息收集、资产梳理等领域。☆17Aug 14, 2025Updated last year
- nmap nse script for scan a whole country☆13Jun 28, 2022Updated 4 years ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- Custom Kernel for Samsung Galaxy Note 9 running Samsung Firmware (Pie 9.0)☆13Mar 11, 2020Updated 6 years ago
- A high-performance technology detection tool built with Go, leveraging the projectdiscovery wappalyzergo library to identify web technolo…☆15Oct 5, 2026Updated last month
- 一款自动化进行googledork的工具，帮助测试人员迅速进行敏感信息收集☆12Apr 13, 2024Updated 2 years ago
- A small framework for isolated testing of tmux plugins.☆19Apr 19, 2019Updated 7 years ago
- Webarchive is a Go package for pentesters and developers to interacting with the Wayback Machine's CDX API and integrate web archive util…☆11Feb 25, 2024Updated 2 years ago
- Environment modules for the ILRI, Nairobi HPC cluster☆11Jun 9, 2026Updated 5 months ago
- ☆11Apr 23, 2025Updated last year
Are these results useful?