A curated list of common and advanced Cross-Site Scripting (XSS) payloads for penetration testing, bug bounty hunting, and web application security research. Useful for learning, practicing, and automating XSS vulnerability detection.
☆25Jun 19, 2025Updated last year
Alternatives and similar repositories for XSS_payloads_list
Users that are interested in XSS_payloads_list are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Here you can find mostly all disclosed h1 reports☆21Apr 4, 2019Updated 7 years ago
- ☆16Apr 17, 2026Updated 6 months ago
- This tool provides a sophisticated yet easy-to-use solution for maintaining anonymity during security testing. The timed rotation feature…☆11Jul 16, 2025Updated last year
- A curated list of powerful one-liners from different sources☆11Mar 29, 2025Updated last year
- Script Python untuk melacak **lokasi nomor HP secara realtime**, aman dari modifikasi, dan hanya bisa dijalankan dengan **kata aktivasi**…☆14Apr 25, 2025Updated last year
- GPUs on demand by Runpod - Special Offer Available • AdRun AI, ML, and HPC workloads on powerful cloud GPUs—without limits or wasted spend. Deploy GPUs in under a minute and pay by the second.
- VidPhisher is a phishing tool. It will generate a link. If anyone opens the link and permits camera access, his/her video will be capture…☆17Mar 14, 2023Updated 3 years ago
- CVE-2026-32475 The Elementor Pro Forms File Upload field handles validation and file processing in two separate loops with different han…☆13Aug 21, 2026Updated 2 months ago
- ☆11Apr 29, 2018Updated 8 years ago
- Passwords Recovery Tool☆22Feb 10, 2019Updated 7 years ago
- Universal QR and barcode scanner SDK built with Kotlin Multiplatform and Compose. Supports Android, iOS, Desktop, and Web. Ideal for KMP,…☆21Aug 5, 2026Updated 3 months ago
- Creating Happy Diwali Wishes Animation with awesome text & deep jawala using HTML & CSS.☆22Aug 29, 2026Updated 2 months ago
- Deep-dive CVE writeups: how vulnerabilities work, why they exist, and lessons for secure coding.☆15Dec 12, 2025Updated 10 months ago
- Implemented a data structure that will help solve a simplified version of the mobile phone tracking problem, i.e., the fundamental proble…☆13Oct 18, 2018Updated 8 years ago
- Deploy Vulnerable Lab to Learn Pentest using Bash Script☆18May 2, 2023Updated 3 years ago
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- Simple tool to bypass 401/403 by manipulating headers in request☆18Dec 12, 2025Updated 10 months ago
- ☆21Jul 11, 2024Updated 2 years ago
- Melakukan Penghijauan Pada Repository☆20Oct 26, 2026Updated last week
- the collection of all useful extensions that are used in web hacking & Bug Bounty Hunting☆13Sep 4, 2023Updated 3 years ago
- A Telegram Message forward or backup or clone ( or whatever you want to call it) bot.☆14Dec 15, 2025Updated 10 months ago
- Focused XSS fuzz scanner with smart payloads, reflection analysis, CSP checks, WAF hints, DOM sink detection, and optional browser valida…☆29Updated this week
- Nessus is one of the many vulnerability scanners used during vulnerability assessments☆34Aug 25, 2023Updated 3 years ago
- Red Hat Developer Hub documentation - upstream sources for https://gitlab.cee.redhat.com/red-hat-developers-documentation/rhdh☆24Updated this week
- The WiFi Penetration Toolkit☆37Jul 8, 2021Updated 5 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- A professional, asynchronous CLI tool to automate XRP claims from Faucetearner.org. Built with modern Python standards for efficiency and…☆11Aug 20, 2025Updated last year
- ip geo location get info like location , isp , org , country and more ...☆41Jul 24, 2022Updated 4 years ago
- Resolução dos exercícios do livro Introdução à Programação com Python - 3ª Edição, de Nilo Ney Coutinho Menezes☆13Feb 3, 2021Updated 5 years ago
- A BurpSuite extension for vulnerability Scanning☆31Feb 16, 2024Updated 2 years ago
- ~ ✨ in the works ✨ ~ A simple "coming soon" site for web-projects under my work.☆11Oct 28, 2026Updated last week
- List of custom developed KQL queries to help proactive security teams hunt for opportunistic and sophisticated threat activity by develop…☆27Jun 30, 2021Updated 5 years ago
- Bug Bounty Methodology 2025: Tools, techniques, and steps to guide you through reconnaissance, enumeration, and testing.☆498May 21, 2025Updated last year
- This is a website built with React, Mapbox, Three.js, EmailJS, and Styled Components. It's a 3D website that allows users to explore and …☆35Mar 7, 2023Updated 3 years ago
- This is Camera Dorks for your default browser by 1vere$k.☆22May 24, 2022Updated 4 years ago
- Simple, predictable pricing with DigitalOcean hosting • AdAlways know what you'll pay with monthly caps and flat pricing. Enterprise-grade infrastructure trusted by 600k+ customers.
- Prompt that is for analying vulnerablity in source codes☆22Apr 30, 2026Updated 6 months ago
- ☆17Oct 16, 2020Updated 6 years ago
- Daftar ini berisikan alamat untuk melaporkan Insiden Keamanan Siber dan Kerentanan pada website atau aplikasi web milik Pemerintah Indone…☆11Updated this week
- Burp Suite extension for cross-identity & cross-tenant access-control testing — BAC, IDOR, BOLA, and privilege escalation.☆63Jul 12, 2026Updated 3 months ago
- Whatsapp Bot Hosting 2023☆11Oct 1, 2026Updated last month
- Linkfinder by Rdzsp is a browser extension that automatically scans and collects endpoints from JavaScript files on websites☆32Aug 22, 2024Updated 2 years ago
- Wing FTP Server Remote Code Execution (RCE) Exploit (CVE-2025-47812)☆54Jul 14, 2025Updated last year