Exotic and uncommon XSS Vectors to hit the target as quickly as possible.
☆20May 27, 2020Updated 5 years ago
Alternatives and similar repositories for Awesome-XSS-Payloads
Users that are interested in Awesome-XSS-Payloads are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- WebApp for BugBounty Hunters☆14Mar 24, 2017Updated 9 years ago
- ☆18Nov 24, 2020Updated 5 years ago
- SIP Tools☆14Sep 15, 2016Updated 9 years ago
- Passively check for XSS character encodings☆18Mar 9, 2026Updated 2 weeks ago
- Automated Recon Tool Installer☆16Jun 29, 2022Updated 3 years ago
- Proton VPN Special Offer - Get 70% off • AdSpecial partner offer. Trusted by over 100 million users worldwide. Tested, Approved and Recommended by Experts.
- parse ffuf & map endpoints to wordlists☆21Feb 25, 2021Updated 5 years ago
- A tool which allows HackerOne researchers to download their reports into a local, indexed, and searchable repository☆19Sep 29, 2022Updated 3 years ago
- Bug Bounty Platforms☆26Oct 17, 2024Updated last year
- Extract metadata with SSRF (Server-Side Request Forgery)☆16Jul 23, 2022Updated 3 years ago
- OSINT tool abusing SecurityTrails domain suggestion API to find potentially related domains by keyword and brute force.☆26Mar 10, 2023Updated 3 years ago
- Go command line app to exploit file upload vulnerability☆12Feb 8, 2017Updated 9 years ago
- AzureAD Pentest☆25Mar 24, 2022Updated 4 years ago
- Wordlists for Bug Bounty☆23Aug 18, 2019Updated 6 years ago
- ☆16Mar 11, 2024Updated 2 years ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- This repository contains additional files mentioned in the blog post☆22Feb 26, 2019Updated 7 years ago
- ☆19Sep 1, 2022Updated 3 years ago
- ProcDot Malware Sandbox☆26Jul 28, 2025Updated 8 months ago
- A Go tool that gets the newest PRs from projectdiscovery/nuclei-templates.☆55Jun 13, 2023Updated 2 years ago
- Repository of various scripts related to Mobile PT. Copyrights and Licensing terms belong to respective owners.☆12Nov 4, 2019Updated 6 years ago
- A multi-threaded password sprayer based on Medusa, built for distributed spraying.☆36Oct 17, 2021Updated 4 years ago
- Updated Malware Crawler to populate repositories☆10Jul 6, 2015Updated 10 years ago
- A collection of lab reports of the Penetration Testing Student course by INE which prepares you for the eJPT.☆50Jun 27, 2021Updated 4 years ago
- Cloud Discovery - brute force public AWS, GCP, Alibaba, and Azure cloud services☆24Jan 21, 2021Updated 5 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting with the flexibility to host WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Cloudways by DigitalOcean.
- Simple Python Modular Script to Broke Web Logins☆15Oct 7, 2022Updated 3 years ago
- List of fresh and validated DNS resolvers updated every 12h.☆24Mar 22, 2026Updated last week
- public dns server list for dmut project☆18Nov 30, 2023Updated 2 years ago
- Enhanced 403 bypass header☆21Sep 12, 2022Updated 3 years ago
- ☆15Mar 21, 2025Updated last year
- ☆12Sep 4, 2013Updated 12 years ago
- Offensive Assembly code snippets.☆13Jul 12, 2023Updated 2 years ago
- Test the speed and reliability of a list of DNS servers☆22Dec 9, 2020Updated 5 years ago
- Go script for bypassing 403 forbidden☆161Aug 6, 2021Updated 4 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting with the flexibility to host WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Cloudways by DigitalOcean.
- Speed-up your hunting with google dorks🚀🚀☆21Sep 8, 2022Updated 3 years ago
- Here I am trying to show you some cheat-sheet of nmap. Which may help you on penetration testing and bug hunting.☆20Dec 20, 2021Updated 4 years ago
- GetSystem-LCI is a PowerShell script to escalate privileges from Administrator to NT AUTHORITY\SYSTEM by abusing LanguageComponentsInstal…☆36Nov 24, 2024Updated last year
- A command-line utility for auditing DNS configuration using Zonemaster API☆32Aug 21, 2023Updated 2 years ago
- ☆23Sep 19, 2024Updated last year
- recon.cloud is website that scans AWS, Azure and GCP public cloud footprint this GO tool only utilize its API for getting result to termi…☆25Feb 11, 2023Updated 3 years ago
- A Collection of Wordlists for Penetration Testing☆35Mar 13, 2026Updated 2 weeks ago