Exotic and uncommon XSS Vectors to hit the target as quickly as possible.
☆20May 27, 2020Updated 6 years ago
Alternatives and similar repositories for Awesome-XSS-Payloads
Users that are interested in Awesome-XSS-Payloads are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Quick tool to create custom wordlists like how fuzzers work☆10Sep 29, 2023Updated 2 years ago
- WebApp for BugBounty Hunters☆14Mar 24, 2017Updated 9 years ago
- Spring Boot web application vulnerable to CVE-2021-44228, nicknamed Log4Shell.☆13Dec 14, 2021Updated 4 years ago
- ☆18Nov 24, 2020Updated 5 years ago
- Passively check for XSS character encodings☆19Mar 9, 2026Updated 2 months ago
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- Automated Recon Tool Installer☆16Jun 29, 2022Updated 3 years ago
- parse ffuf & map endpoints to wordlists☆21Feb 25, 2021Updated 5 years ago
- A tool which allows HackerOne researchers to download their reports into a local, indexed, and searchable repository☆19Sep 29, 2022Updated 3 years ago
- Bug Bounty Platforms☆26Oct 17, 2024Updated last year
- Extract metadata with SSRF (Server-Side Request Forgery)☆16Jul 23, 2022Updated 3 years ago
- OSINT tool abusing SecurityTrails domain suggestion API to find potentially related domains by keyword and brute force.☆26Mar 10, 2023Updated 3 years ago
- Go command line app to exploit file upload vulnerability☆12Feb 8, 2017Updated 9 years ago
- AzureAD Pentest☆25Mar 24, 2022Updated 4 years ago
- Wordlists for Bug Bounty☆23Aug 18, 2019Updated 6 years ago
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- A window overlay written in Rust☆14Apr 28, 2021Updated 5 years ago
- A cheatsheet of commands used to pass the CARTP (Certified Azure Red Team Professional) exam.☆25May 4, 2023Updated 3 years ago
- This repository contains additional files mentioned in the blog post☆22Feb 26, 2019Updated 7 years ago
- ☆19Sep 1, 2022Updated 3 years ago
- ProcDot Malware Sandbox☆26Jul 28, 2025Updated 10 months ago
- A Go tool that gets the newest PRs from projectdiscovery/nuclei-templates.☆55Jun 13, 2023Updated 2 years ago
- Repository of various scripts related to Mobile PT. Copyrights and Licensing terms belong to respective owners.☆12Nov 4, 2019Updated 6 years ago
- A multi-threaded password sprayer based on Medusa, built for distributed spraying.☆37Oct 17, 2021Updated 4 years ago
- Updated Malware Crawler to populate repositories☆10Jul 6, 2015Updated 10 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- A collection of lab reports of the Penetration Testing Student course by INE which prepares you for the eJPT.☆49Jun 27, 2021Updated 4 years ago
- Cloud Discovery - brute force public AWS, GCP, Alibaba, and Azure cloud services☆24Jan 21, 2021Updated 5 years ago
- Simple Python Modular Script to Broke Web Logins☆15Oct 7, 2022Updated 3 years ago
- List of fresh and validated DNS resolvers updated every 12h.☆24Updated this week
- Enhanced 403 bypass header☆21Sep 12, 2022Updated 3 years ago
- Awesome XSS Payloads☆83Feb 24, 2016Updated 10 years ago
- ☆15Mar 21, 2025Updated last year
- ☆12Sep 4, 2013Updated 12 years ago
- Offensive Assembly code snippets.☆13Jul 12, 2023Updated 2 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Test the speed and reliability of a list of DNS servers☆22Dec 9, 2020Updated 5 years ago
- Speed-up your hunting with google dorks🚀🚀☆21Sep 8, 2022Updated 3 years ago
- Here I am trying to show you some cheat-sheet of nmap. Which may help you on penetration testing and bug hunting.☆20Dec 20, 2021Updated 4 years ago
- GetSystem-LCI is a PowerShell script to escalate privileges from Administrator to NT AUTHORITY\SYSTEM by abusing LanguageComponentsInstal…☆36Nov 24, 2024Updated last year
- A command-line utility for auditing DNS configuration using Zonemaster API☆32Aug 21, 2023Updated 2 years ago
- ☆23Sep 19, 2024Updated last year
- a breakdown of the Certified Ethical Hacker (CEH v13) course modules along with their key objectives. These modules are structured to al…☆24Jul 13, 2025Updated 10 months ago