Exotic and uncommon XSS Vectors to hit the target as quickly as possible.
☆21May 27, 2020Updated 6 years ago
Alternatives and similar repositories for Awesome-XSS-Payloads
Users that are interested in Awesome-XSS-Payloads are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Quick tool to create custom wordlists like how fuzzers work☆10Sep 29, 2023Updated 3 years ago
- ☆16Nov 24, 2020Updated 5 years ago
- Spring Boot web application vulnerable to CVE-2021-44228, nicknamed Log4Shell.☆13Dec 14, 2021Updated 4 years ago
- WebApp for BugBounty Hunters☆14Mar 24, 2017Updated 9 years ago
- Subdomain enumeration tool, asynchronous dns packets, use pcap to scan 1600,000 subdomains in 1 second修复内存溢出等bug☆15Nov 25, 2023Updated 2 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- ☆10Oct 23, 2025Updated last year
- Automated Recon Tool Installer☆16Jun 29, 2022Updated 4 years ago
- Password Lists for penetration testing, sorted by language.☆13Nov 23, 2017Updated 8 years ago
- Extract metadata with SSRF (Server-Side Request Forgery)☆16Jul 23, 2022Updated 4 years ago
- Passively check for XSS character encodings☆20Mar 9, 2026Updated 7 months ago
- Bug Bounty Platforms☆26Oct 17, 2024Updated 2 years ago
- parse ffuf & map endpoints to wordlists☆20Feb 25, 2021Updated 5 years ago
- Go command line app to exploit file upload vulnerability☆12Feb 8, 2017Updated 9 years ago
- SIP Tools☆15Sep 15, 2016Updated 10 years ago
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- Wordlists for Bug Bounty☆23Aug 18, 2019Updated 7 years ago
- OSINT tool abusing SecurityTrails domain suggestion API to find potentially related domains by keyword and brute force.☆26Mar 10, 2023Updated 3 years ago
- A tool which allows HackerOne researchers to download their reports into a local, indexed, and searchable repository☆17Sep 29, 2022Updated 4 years ago
- Repository of various scripts related to Mobile PT. Copyrights and Licensing terms belong to respective owners.☆11Nov 4, 2019Updated 7 years ago
- A high-performance command-line utility for processing and managing unique lines from input streams. Combining the functionality of sort,…☆17Jan 7, 2026Updated 10 months ago
- A Go tool that gets the newest PRs from projectdiscovery/nuclei-templates.☆55Jun 13, 2023Updated 3 years ago
- Cloud Discovery - brute force public AWS, GCP, Alibaba, and Azure cloud services☆24Jan 21, 2021Updated 5 years ago
- Here I am trying to show you some cheat-sheet of nmap. Which may help you on penetration testing and bug hunting.☆21Dec 20, 2021Updated 4 years ago
- public dns server list for dmut project☆18Updated this week
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- Speed-up your hunting with google dorks🚀🚀☆21Sep 8, 2022Updated 4 years ago
- Simple Python Modular Script to Broke Web Logins☆15Oct 7, 2022Updated 4 years ago
- Run ffuf with the appropriate options to brute-force the directories using the awesome different wordlists.☆25Apr 19, 2023Updated 3 years ago
- A collection of lab reports of the Penetration Testing Student course by INE which prepares you for the eJPT.☆53Jun 27, 2021Updated 5 years ago
- Test the speed and reliability of a list of DNS servers☆22Sep 7, 2026Updated 2 months ago
- ☆12Sep 4, 2013Updated 13 years ago
- Common Wordlists☆60Aug 26, 2016Updated 10 years ago
- recon.cloud is website that scans AWS, Azure and GCP public cloud footprint this GO tool only utilize its API for getting result to termi…☆23Feb 11, 2023Updated 3 years ago
- Instant access to you bug bounty submission dashboard on various platforms + publicly disclosed reports + #bugbountytip☆27May 26, 2020Updated 6 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- List of fresh and validated DNS resolvers updated every 12h.☆24Updated this week
- ☆23Sep 19, 2024Updated 2 years ago
- GetSystem-LCI is a PowerShell script to escalate privileges from Administrator to NT AUTHORITY\SYSTEM by abusing LanguageComponentsInstal…☆35Nov 24, 2024Updated last year
- ☆29May 22, 2024Updated 2 years ago
- Post-explotation Hacks☆14Jan 6, 2019Updated 7 years ago
- A cheatsheet of commands used to pass the CARTP (Certified Azure Red Team Professional) exam.☆26May 4, 2023Updated 3 years ago
- AzureAD Pentest☆25Mar 24, 2022Updated 4 years ago