A curated list of common and advanced Cross-Site Scripting (XSS) payloads for penetration testing, bug bounty hunting, and web application security research. Useful for learning, practicing, and automating XSS vulnerability detection.
☆26Jun 19, 2025Updated last year
Alternatives and similar repositories for XSS_payloads_list
Users that are interested in XSS_payloads_list are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- ☆27Jan 11, 2024Updated 2 years ago
- Here's an updated Google Dorking list for 2025 Bug Bounty Hunting, incorporating new patterns and, the latest trends.☆25Apr 26, 2025Updated last year
- Universal QR and barcode scanner SDK built with Kotlin Multiplatform and Compose. Supports Android, iOS, Desktop, and Web. Ideal for KMP,…☆21Aug 5, 2026Updated 2 months ago
- Passwords Recovery Tool☆20Feb 10, 2019Updated 7 years ago
- VidPhisher is a phishing tool. It will generate a link. If anyone opens the link and permits camera access, his/her video will be capture…☆17Mar 14, 2023Updated 3 years ago
- End-to-end encrypted email - Proton Mail • AdSpecial offer: 40% Off Yearly / 80% Off First Month. All Proton services are open source and independently audited for security.
- Intelligence-driven reconnaissance framework for bug bounty hunters and security professionals.☆32Jul 11, 2026Updated 3 months ago
- Deep-dive CVE writeups: how vulnerabilities work, why they exist, and lessons for secure coding.☆16Dec 12, 2025Updated 10 months ago
- A professional, asynchronous CLI tool to automate XRP claims from Faucetearner.org. Built with modern Python standards for efficiency and…☆10Aug 20, 2025Updated last year
- A tool to exploit the hash length extension attack in various hashing algorithms☆17Sep 11, 2012Updated 14 years ago
- Red Hat Developer Hub documentation - upstream sources for https://gitlab.cee.redhat.com/red-hat-developers-documentation/rhdh☆24Updated this week
- Nessus is one of the many vulnerability scanners used during vulnerability assessments☆34Aug 25, 2023Updated 3 years ago
- ☆11Apr 11, 2023Updated 3 years ago
- Get Vehicle Details from the number plate's number. [Only for India]☆21Aug 6, 2019Updated 7 years ago
- Linkfinder by Rdzsp is a browser extension that automatically scans and collects endpoints from JavaScript files on websites☆32Aug 22, 2024Updated 2 years ago
- Bare Metal GPUs on DigitalOcean Gradient AI • AdPurpose-built for serious AI teams training foundational models, running large-scale inference, and pushing the boundaries of what's possible.
- ☆13Aug 10, 2022Updated 4 years ago
- Spam OTP dari situs" layanan tanya jawab (konsultasi) dokter gratis di indonesia☆11Apr 27, 2021Updated 5 years ago
- Whatsapp Bot Hosting 2023☆11Oct 1, 2026Updated 2 weeks ago
- ☆14Mar 11, 2023Updated 3 years ago
- Provides the Unity Editor with an alternative inspector/editor for .guiskin files.☆12Apr 11, 2017Updated 9 years ago
- XTEAM API☆13Jun 13, 2022Updated 4 years ago
- ip geo location get info like location , isp , org , country and more ...☆40Jul 24, 2022Updated 4 years ago
- ~ ✨ in the works ✨ ~ A simple "coming soon" site for web-projects under my work.☆11Updated this week
- Interactive reference guide for pentesting DevOps pipelines. 60+ tools with attack vectors. Credits: Tom & Colbert from Accenture (Fusion…☆54Oct 8, 2025Updated last year
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- A Telegram Message forward or backup or clone ( or whatever you want to call it) bot.☆14Dec 15, 2025Updated 10 months ago
- Walrus 共学☆15Nov 27, 2024Updated last year
- CVE-2025-55182-bypass-waf☆30Jan 8, 2026Updated 9 months ago
- qris static to dynamic☆11Dec 9, 2024Updated last year
- Cracked version of LockBit Ransomware Including the missing Locker files. Including source code.☆21Sep 21, 2023Updated 3 years ago
- State-of-the-art, developer-friendly, open-source move testing framework.☆17Aug 16, 2026Updated 2 months ago
- Whastapp Bot With All In One Tool☆19Nov 1, 2024Updated last year
- aria2 integration extension for Chrome☆13Mar 2, 2018Updated 8 years ago
- Pegasus Lacak Ultimate adalah toolkit OSINT (Open Source Intelligence) yang dirancang untuk investigasi digital dan pengumpulan informasi…☆34Mar 10, 2026Updated 7 months ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- Brute Force Facebook☆11May 5, 2019Updated 7 years ago
- Resolução dos exercícios do livro Introdução à Programação com Python - 3ª Edição, de Nilo Ney Coutinho Menezes☆13Feb 3, 2021Updated 5 years ago
- ☆20Apr 19, 2024Updated 2 years ago
- javascript extension of windbg for hacker.☆19Jun 27, 2023Updated 3 years ago
- CLAUDE.md configs and skills I use for bug bounty hunting with Claude Code☆34Apr 14, 2026Updated 6 months ago
- A smart fuzzing and parameter injection tool designed to discover reflections and identify potential XSS attack vectors.☆38Updated this week
- glua.team site☆11Apr 10, 2020Updated 6 years ago