A curated list of common and advanced Cross-Site Scripting (XSS) payloads for penetration testing, bug bounty hunting, and web application security research. Useful for learning, practicing, and automating XSS vulnerability detection.
☆25Jun 19, 2025Updated last year
Alternatives and similar repositories for XSS_payloads_list
Users that are interested in XSS_payloads_list are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- ☆19Jul 11, 2024Updated 2 years ago
- Here's an updated Google Dorking list for 2025 Bug Bounty Hunting, incorporating new patterns and, the latest trends.☆20Apr 26, 2025Updated last year
- Universal QR and barcode scanner SDK built with Kotlin Multiplatform and Compose. Supports Android, iOS, Desktop, and Web. Ideal for KMP,…☆21Aug 5, 2026Updated last month
- Passwords Recovery Tool☆20Feb 10, 2019Updated 7 years ago
- Deep-dive CVE writeups: how vulnerabilities work, why they exist, and lessons for secure coding.☆16Dec 12, 2025Updated 9 months ago
- Simple, predictable pricing with DigitalOcean hosting • AdAlways know what you'll pay with monthly caps and flat pricing. Enterprise-grade infrastructure trusted by 600k+ customers.
- Deploy Vulnerable Lab to Learn Pentest using Bash Script☆18May 2, 2023Updated 3 years ago
- Advanced Recon tool for Bug Bounty and Pentesting☆33Oct 22, 2025Updated 10 months ago
- the collection of all useful extensions that are used in web hacking & Bug Bounty Hunting☆13Sep 4, 2023Updated 3 years ago
- A tool to exploit the hash length extension attack in various hashing algorithms☆17Sep 11, 2012Updated 14 years ago
- Red Hat Developer Hub documentation - upstream sources for https://gitlab.cee.redhat.com/red-hat-developers-documentation/rhdh☆24Updated this week
- Prompt that is for analying vulnerablity in source codes☆19Apr 30, 2026Updated 4 months ago
- ☆11Apr 11, 2023Updated 3 years ago
- ☆14Mar 11, 2023Updated 3 years ago
- Interactive reference guide for pentesting DevOps pipelines. 60+ tools with attack vectors. Credits: Tom & Colbert from Accenture (Fusion…☆49Oct 8, 2025Updated 11 months ago
- Virtual machines for every use case on DigitalOcean • AdGet dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
- Walrus 共学☆15Nov 27, 2024Updated last year
- CVE-2025-55182-bypass-waf☆31Jan 8, 2026Updated 8 months ago
- Quickly learn and understand the EIP-7702☆21Updated this week
- ☆20Apr 19, 2024Updated 2 years ago
- Cracked version of LockBit Ransomware Including the missing Locker files. Including source code.☆21Sep 21, 2023Updated 2 years ago
- State-of-the-art, developer-friendly, open-source move testing framework.☆17Aug 16, 2026Updated last month
- 基于多种策略, 对已有 JAR 包中的全限定类名进行变换, 无限生成高度相似的虚假类名☆20Jul 30, 2025Updated last year
- 👽 Metasploit is the most widely used open-source exploitation framework. Learn how to use it and unlock its full potential.☆34Dec 10, 2023Updated 2 years ago
- CLAUDE.md configs and skills I use for bug bounty hunting with Claude Code☆33Apr 14, 2026Updated 5 months ago
- Deploy open-source AI quickly and easily - Special Bonus Offer • AdRunpod Hub is built for open source. One-click deployment and autoscaling endpoints without provisioning your own infrastructure.
- ☆21Sep 8, 2026Updated last week
- Finds matching solidity function signatures for a given 4 byte signature hash and arguments.☆19Oct 21, 2021Updated 4 years ago
- A script that gives you the credentials of a Pterodactyl panel vulnerable to CVE-2025-49132☆17Jun 22, 2025Updated last year
- ☆32May 27, 2024Updated 2 years ago
- Create an animated GitHub Profile README from a transparent portrait and structured profile data.☆61Jul 14, 2026Updated 2 months ago
- ☆23May 11, 2024Updated 2 years ago
- Move Vulnerability Database☆19Nov 18, 2025Updated 10 months ago
- 🐦🌴🌴🌴🦕 A home for ethereum smart contracts. 🏠☆20Aug 1, 2023Updated 3 years ago
- 远控免杀系列文章及配套工具，汇总测试了互联网上的几十种免杀工具、113种白名单免杀方式、8种代码编译免杀、若干免杀实战技术，并对免杀效果进行了一一测试，为远控的免杀和杀软对抗免杀提供参考。☆18May 1, 2020Updated 6 years ago
- Deploy open-source AI quickly and easily - Special Bonus Offer • AdRunpod Hub is built for open source. One-click deployment and autoscaling endpoints without provisioning your own infrastructure.
- Private Proof API☆25Nov 12, 2025Updated 10 months ago
- Bug Bounty Methodology 2025: Tools, techniques, and steps to guide you through reconnaissance, enumeration, and testing.☆481May 21, 2025Updated last year
- Command and Control Framework using powershell implants☆36Jun 17, 2025Updated last year
- Aplikasi Python untuk melacak nomor telepon dan NIK dari Telkomsel dengan interface yang user-friendly.☆64Feb 5, 2026Updated 7 months ago
- Solidity static analyzer you can talk to. MCP integration for Claude Code, Cursor, and Windsurf.☆30Jan 27, 2026Updated 7 months ago
- Foundry 文档简体中文版本☆27Nov 13, 2024Updated last year
- ☆24Mar 1, 2024Updated 2 years ago