Collection of XSS Payloads for fun and profit
☆222Aug 14, 2020Updated 6 years ago
Alternatives and similar repositories for XSS-Payloads
Users that are interested in XSS-Payloads are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Reverse shell auto generator used for Hackthebox/OSCP/Pentest/LABExp☆40Dec 29, 2020Updated 5 years ago
- Bugbounty utility to store list of enumerated subdomains into an sqlite3 db [one liner style / Pipe and save]☆29Jan 6, 2021Updated 5 years ago
- Personnel scripts,projects notes,hacks,random thoughts,mindmap etc....☆36Feb 14, 2025Updated last year
- User-Agent , X-Forwarded-For and Referer SQLI Fuzzer☆388May 19, 2023Updated 3 years ago
- Scrapes Router Passwords From http://www.routerpasswords.com ,more then +300 product☆48Jan 4, 2018Updated 8 years ago
- Bare Metal GPUs on DigitalOcean Gradient AI • AdPurpose-built for serious AI teams training foundational models, running large-scale inference, and pushing the boundaries of what's possible.
- Finding XSS during recon☆271Sep 13, 2022Updated 4 years ago
- HTTP requests of FrontPage expolit☆26Dec 19, 2013Updated 12 years ago
- ☆12Jun 16, 2021Updated 5 years ago
- RedTeam/Pentest notes and experiments tested on several infrastructures related to professional engagements.☆1,938Oct 29, 2025Updated last year
- Funny Fuzzing Wordlist☆14Jun 14, 2022Updated 4 years ago
- Bug Bounty stuffs, payloads, scripts, profiles, tips and tricks, ...☆148Jul 30, 2020Updated 6 years ago
- ☆38Dec 10, 2023Updated 2 years ago
- ☆12Jan 4, 2022Updated 4 years ago
- A replacement of "qsreplace", accepts URLs as standard input, replaces all query string values with user-supplied values and stdout.☆108Mar 1, 2022Updated 4 years ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- 31 Tips for pentesters & security engineers☆83Aug 20, 2021Updated 5 years ago
- ☆25Dec 4, 2019Updated 6 years ago
- Subdomain Enumeration Wordlist. 8956437 unique words. Updated.☆77May 23, 2020Updated 6 years ago
- ☆175Dec 27, 2024Updated last year
- Cross Site Scripting ( XSS ) Vulnerability Payload List☆23Feb 23, 2021Updated 5 years ago
- A simple tool which makes creating nuclei templates even easier.☆36Jun 23, 2024Updated 2 years ago
- This repository holds all the list of advanced XSS payloads that can be used in penetration testing. These payloads can be loaded into XS…☆1,143Jul 16, 2024Updated 2 years ago
- Burp Extension to find potential endpoints, parameters, and generate a custom target wordlist☆1,540Jan 8, 2026Updated 9 months ago
- The list of files through which we can pop-up the java script alert box☆41Mar 5, 2018Updated 8 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Xss Payload Generator ~ Xss Scanner ~ Xss Dork Finder☆624May 2, 2026Updated 6 months ago
- One place for all the default credentials to assist the Blue/Red teamers identifying devices with default password 🛡️☆6,813Sep 27, 2026Updated last month
- ☆11Mar 7, 2021Updated 5 years ago
- ☆28Dec 13, 2023Updated 2 years ago
- 🌙🦊 Dalfox is a powerful open-source XSS scanner and utility focused on automation.☆5,356Updated this week
- Awesome XSS Payloads☆84Feb 24, 2016Updated 10 years ago
- Bash script to extract data from the Waybackmachine☆11Mar 15, 2021Updated 5 years ago
- Prototype Pollution Scanner☆145Apr 11, 2021Updated 5 years ago
- ☆959Dec 26, 2025Updated 10 months ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- ☆133Jul 15, 2021Updated 5 years ago
- BUG HUNTING/WEB APPLICATION PENTESTING CHECKLIST☆15May 30, 2023Updated 3 years ago
- A solid recon tool I use personally.☆30May 12, 2023Updated 3 years ago
- ☆17Jan 24, 2023Updated 3 years ago
- Prototype Pollution and useful Script Gadgets☆1,659Jan 27, 2024Updated 2 years ago
- Fast CLI tool to find the parameters that can be used to find SSRF or Out-of-band resource load☆295Sep 22, 2024Updated 2 years ago
- An exhaustive list of all the possible ways you can chain your Blind SSRF vulnerability☆996Dec 31, 2021Updated 4 years ago