gprime31 / WAF-bypass-xss-payloadsLinks
XSS payloads for bypassing WAF. This repository is updating continuously.
☆254Updated last year
Alternatives and similar repositories for WAF-bypass-xss-payloads
Users that are interested in WAF-bypass-xss-payloads are comparing it to the libraries listed below
Sorting:
- ☆249Updated 4 years ago
- List of Directory Traversal/LFI Payloads Scraped from the Internet☆182Updated 9 months ago
- My Priv8 Nuclei Templates☆331Updated last year
- Automated Tool for Testing Header Based Blind SQL Injection☆291Updated 2 years ago
- This is a python wrapper around the amazing KNOXSS API by Brute Logic☆274Updated last week
- A simple Burp Suite extension to crawl JavaScript (JS) files in passive mode and display the results directly on the issues☆369Updated 2 years ago
- jsluice++ is a Burp Suite extension designed for passive and active scanning of JavaScript traffic using the CLI tool jsluice☆287Updated last year
- Automatic Bug finder with buprsuite☆166Updated 2 years ago
- i will upload more templates here to share with the comunity.☆560Updated last year
- 10,000 H1 Disclosed Reports☆117Updated last year
- Advanced SQL Injection Techniques for Bug Bounty Hunters☆138Updated 9 months ago
- 40,000+ Nuclei templates for security scanning and detection across diverse web applications and services☆336Updated last year
- ☆301Updated 2 years ago
- Mining URLs from dark corners of Web Archives for bug hunting/fuzzing/further probing☆156Updated 8 months ago
- EndExt is a .go tool for extracting all the possible endpoints from the JS files☆217Updated last year
- ☆126Updated 2 months ago
- Useful "Match and Replace" burpsuite rules☆352Updated 2 years ago
- ☆412Updated 2 weeks ago
- ☆160Updated 10 months ago
- Fuzz 401/403/404 pages for bypasses☆349Updated 11 months ago
- A comprehensive list of custom filters for Logger++ to identify various vulnerabilities in different API styles☆229Updated last year
- Collected fuzzing payloads from different resources☆122Updated last year
- Never forget where you inject.☆290Updated 3 months ago
- All About Dependency Confusion Attack, (Detecting, Finding, Mitigating)☆301Updated last year
- A collection oneliner scripts for bug bounty☆179Updated last year
- User-Agent , X-Forwarded-For and Referer SQLI Fuzzer☆383Updated 2 years ago
- ☆542Updated last year
- Smart context-based SSRF vulnerability scanner.☆360Updated 3 years ago
- MapperPlus facilitates the extraction of source code from a collection of targets that have publicly exposed .js.map files.☆285Updated last year
- Advanced Time-based Blind SQL Injection fuzzer for HTTP Headers☆307Updated last year