本项目是一个以“实战为导向”的 XSS 漏洞练习靶场，覆盖反射型、存储型、DOM 型、SVG、CSP、框架注入、协议绕过等多种场景。页面样式统一，逻辑清晰，适合系统化学习与教学演示
☆42Mar 6, 2026Updated 7 months ago
Alternatives and similar repositories for XSS-Sec
Users that are interested in XSS-Sec are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Vue 安全漏洞及 JS 逆向反调试练习靶场☆13Jan 18, 2026Updated 9 months ago
- ☆19Jun 16, 2026Updated 4 months ago
- POCWriter 是一个编写 POC 的 vscode 代码提示小工具，让我们像搭积木一样✍️ poc☆11Feb 11, 2026Updated 8 months ago
- 首个多维度，UI/UX友好的Burp suite越权漏洞检测插件☆47Oct 5, 2026Updated 3 weeks ago
- BpArsenal, a Burp Suite plugin that can quickly convert http requests into command-line tool execution, launch third-party tools and open…☆21Oct 31, 2025Updated last year
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- 一款高效的 Burp Suite 插件，专注于检测 URL 路径与 XFF 头部潜在的 SQL 注入漏洞，并集成接口自动采集。☆36Apr 4, 2026Updated 6 months ago
- 蓝队应急响应日志分析工具☆15Jun 20, 2026Updated 4 months ago
- MatouWebshell 是一款基于 Vue 3 和 Python 开发的开源 Webshell 管理与利用平台。支持高度自定义的流量伪装、内网穿透及内存马注入等功能。项目具有极高的扩展性，非常欢迎安全研究人员基于此开源架构进行二次开发（如自定义修改 Payload、新增…☆26Apr 10, 2026Updated 6 months ago
- 帮助红队收集目标企业员工的邮箱信息，借助必应搜索引擎爬取邮箱。☆26Apr 26, 2022Updated 4 years ago
- web app monitoring automation☆14Jan 7, 2025Updated last year
- 鉴穹日志安全分析系统☆18Sep 7, 2025Updated last year
- Hermes is an automated security tool written in Python designed to discover Cross-Site Scripting (XSS) vulnerabilities in web application…☆10Aug 22, 2025Updated last year
- hessian反序列化利用工具☆42Apr 11, 2026Updated 6 months ago
- A collection of js analysis tools & scripts.☆19May 4, 2026Updated 5 months ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- 基于 Chrome Manifest V3 的渗透测试辅助插件，用于快速发现页面输入点、评估 CSP 风险、嗅探潜在敏感资产、识别常见前端框架指纹，并内置常用编码转换工具，帮助进行合法合规的渗透测试与安全检查☆75Mar 2, 2026Updated 7 months ago
- FastjsonScan，支持版本识别、出网检测、AutoType检测、依赖检测，poc验证等功能☆13Jun 17, 2025Updated last year
- 通过Dump提取向日葵、todesk连接id，临时密码、安全密码以及软件config.ini配置文件☆19Nov 28, 2024Updated last year
- 一个基于 FastAPI + React 的企业级资产管理和关系图谱可视化平台 专为渗透测试团队、安全研究人员和红队打造☆21Jan 30, 2026Updated 9 months ago
- LogTrawl 是一个基于 Wails v2 框架开发的现代化桌面日志分析工具，提供强大的日志查看、搜索、过滤和分析功能。☆85Oct 8, 2025Updated last year
- 通用代码审计skills，覆盖PHP/Java/.NET的18类通用漏洞+专项漏洞+动态调试审计☆62May 11, 2026Updated 5 months ago
- 异常流量检测工具 🚀☆19Nov 21, 2025Updated 11 months ago
- 本系统基于 **Windows + WSL (Kali Linux)** 双环境搭建，是一套整合多类AI安全工具的一体化渗透测试平台。系统将大语言模型能力与传统渗透测试工具深度结合，覆盖Web安全、内网攻防、二进制逆向、API测试、流量分析等多个安全领域，可实现渗透测试全流…☆44Aug 26, 2026Updated 2 months ago
- ☆33Aug 28, 2023Updated 3 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- [VscanPlus内外网漏洞扫描工具]已更新HW热门漏洞检测POC。基于veo师傅的漏扫工具vscan二次开发的版本，端口扫描、指纹检测、目录fuzz、漏洞扫描功能工具，批量快速检测网站安全隐患。An open-source, cross-platform websit…☆353Mar 10, 2026Updated 7 months ago
- Engagement fact graph for autonomous pentest agents — typed facts, flag ledger, arena adapter, offline KB. Offensive fork of claude-fact-…☆27Oct 16, 2026Updated 2 weeks ago
- 🚀 2024-至今 1Day 漏洞 PoC 深度研究与复现归档。涵盖 OA、ERP、安防、数通、大模型及容器等 高价值资产漏洞，实战导向，助力安全研究与合规检测。☆1,210Updated this week
- 基于alpine+php7.3的一个RCE命令执行靶场，包含基础命令、shell 特性、常见姿势、常见waf绕过☆64Jul 8, 2026Updated 3 months ago
- IIS 模块后门☆12Feb 23, 2023Updated 3 years ago
- Hit it（攻击它），为个人编写的渗透练习靶场，使用java8+html进行编写，方便用户部署起见，前后端不分离，mysql版本使用5及以上（不含5.6），windows环境开发，支持linux部署☆10Nov 2, 2021Updated 5 years ago
- ☆21Jun 26, 2024Updated 2 years ago
- Automation tool designed to simplify the analysis of PCAP (Packet Capture) files☆20Mar 31, 2026Updated 7 months ago
- 渗透测试实战工作流 skill for Claude Code - 5阶段方法论/19类攻击playbook/2887份H1真实案例/国产组件指纹库☆39Sep 14, 2026Updated last month
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Burpsuite验证码DOS攻击插件。☆21Oct 24, 2024Updated 2 years ago
- pocframe是一个基于python3的开源批量POC检测框架，默认使用协程异步请求，支持多线程并发，支持多种指定目标方式，可用于批量POC检测，也可根据需要扩展功能。☆13Mar 20, 2021Updated 5 years ago
- 一个应急响应的工具，自带规则，可以分析启动项、网络之类的东西☆79Jul 23, 2025Updated last year
- Enhanced Repeater Manager - Burp Suite 增强重放插件☆18Oct 23, 2026Updated last week
- 渗透测试快速启动工具☆17Oct 21, 2025Updated last year
- 【Hello-CTF labs】一个ssrf的综合靶场，包含RCE，SQL注入，Tomcat，Redis，MySQL提权等ssrf攻击场景☆88Mar 18, 2025Updated last year
- 常用CTF爆破字典整理☆16Apr 8, 2023Updated 3 years ago