onxss/OneXSS external links

---

GitHub - View repository

GitHub.dev - Open in online code editor

Star history - Growth chart over time

deps.dev - Dependencies and security vulnerabilities

Gitingest - Export source code for LLM usage

Repomix - Export source code for LLM usage

uithub - Export source code for LLM usage

Close

onxss/OneXSS

Readme badge preview -

If you own this repo, copy the snippet below and add it to your README.md

---

Copy

[![RelatedRepos](https://img.shields.io/badge/related-repos-yellow)](https://relatedrepos.com/gh/onxss/OneXSS)

Close

onxss / OneXSSView on GitHubMore

• External links
• Readme badge

One XSS 是一款基于Cloudflare Pages/D1/KV实现的在线XSS平台,可自定义模块和项目,用于帮助渗透测试工程师进行XSS漏洞验证.

☆49Apr 11, 2024Updated 2 years ago

Alternatives and similar repositories for OneXSS

Users that are interested in OneXSS are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.

• handbye / base64encode

  View on GitHub
  burpsuite POST数据包base64编码插件
  ☆17Mar 14, 2024Updated 2 years ago
• ChenChen753 / sqlmap_gui_v2

  View on GitHub
  SQLMap GUI - 为 SQLMap 打造的现代化图形界面，支持多主题、配置管理、扫描历史
  ☆28Mar 1, 2026Updated 5 months ago
• orleven / Celestion

  View on GitHub
  Celestion 是一个无回显漏洞测试辅助平台，平台使用flask编写，提供DNSLOG，HTTPLOG等功能。 (界面懒得弄，后续有需要再说)。
  ☆28Aug 24, 2023Updated 2 years ago
• bingtangbanli / VulnerabilityTools

  View on GitHub
  [CVE_2023_28432漏洞 、CVE_2023_32315漏洞、 ThinkPHP 2.x 任意代码执行漏洞 、ThinkPHP5 5.0.22/5.1.29 远程代码执行漏洞、 ThinkPHP5 5.0.23 远程代码执行漏洞 ThinkPHP 多语言本地文件包…
  ☆10Aug 31, 2023Updated 2 years ago
• NAXG / ARL

  View on GitHub
  ARL 资产侦察灯塔系统二开 提高性能，升级到 python3.12 增强稳定性。MongoDB 升级到 6x。解决扫描停止问题。
  ☆21Jan 13, 2026Updated 6 months ago
• Wordpress hosting with auto-scaling - Free Trial Offer • Ad
  Fully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
• ybdt / mRemoteNG-Decryptor

  View on GitHub
  Automated mRemoteNG Decrypt Tool
  ☆27Apr 14, 2024Updated 2 years ago
• phpcalm / exceed

  View on GitHub
  一个功能强大的浏览器扩展程序，专门用于检测Web系统中的权限越权漏洞，适用于Web渗透测试。
  ☆45Oct 11, 2025Updated 10 months ago
• TryGOTry / AutoGeaconC2

  View on GitHub
  AutoGeaconC2: 一键读取Profile自动化生成geacon实现跨平台上线CobaltStrike
  ☆142Apr 7, 2024Updated 2 years ago
• shengshengli / ShiroAttack4.5.3

  View on GitHub
  shiro反序列化利用综合利用，包含（回显执行命令/注入内存马）原版中NoCC的问题 https://github.com/j1anFen/shiro_attack
  ☆12May 1, 2022Updated 4 years ago
• rama291041610 / Thinkphp5.0.24-Unserialize-Vulnerability

  View on GitHub
  ☆13Aug 13, 2020Updated 5 years ago
• Okaytc / Superset_auth_bypass_check

  View on GitHub
  Apahce-Superset身份认证绕过漏洞(CVE-2023-27524)检测工具
  ☆11Aug 3, 2023Updated 3 years ago
• xss-root / cobaltstrike_book

  View on GitHub
  cobaltstrike 实战案例, 含20个实战案例。插件包在releases中
  ☆34Aug 28, 2023Updated 2 years ago
• Mayter / mssql-command-tool

  View on GitHub
  xp_cmdshell与sp_oacreate执行命令回显和clr加载程序集执行相应操作，上传，job等相应操作。
  ☆195Nov 25, 2023Updated 2 years ago
• Fupo-series / ICS-Tools

  View on GitHub
  工控设备信息识别工具箱
  ☆60Dec 4, 2025Updated 8 months ago
• Deploy to Railway using AI coding agents - Free Credits Offer • Ad
  Use Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
• TryGOTry / golang-uuid-loader

  View on GitHub
  golang uuid-shellcode加载器,分离执行,可直接把shellcode写入程序。
  ☆15Aug 12, 2021Updated 4 years ago
• zyylhn / redis_rce

  View on GitHub
  Redis primary/secondary replication RCE
  ☆44Apr 18, 2022Updated 4 years ago
• Lingzesec / CVE-2026-24061-GUI

  View on GitHub
  CVE-2026-24061 GNU Inetutils telnetd 身份验证绕过漏洞检测与利用 GUI 工具
  ☆17Jan 28, 2026Updated 6 months ago
• hanc00l / pocGoby2Xray

  View on GitHub
  将Goby的json格式Poc转为xray的yaml格式Poc
  ☆131Nov 19, 2022Updated 3 years ago
• KaneTheo / YuanZhao

  View on GitHub
  「渊照」是一款功能强大的专业暗链扫描工具，专注于检测网站、HTML文件或目录中的隐蔽链接、隐藏元素和恶意代码。该工具能够智能识别扫描目标类型（本地文件/目录、内网URL、公网URL），并自动调整扫描策略以获得最佳效果，是安全人员进行网站安全审计和应急响应的理想工具。
  ☆100Jun 17, 2026Updated last month
• TheBeastofwar / linuxhacker

  View on GitHub
  一款linux 内网渗透辅助工具
  ☆78Jan 31, 2024Updated 2 years ago
• h4ckdepy / Un1kPoc

  View on GitHub
  非常专业的漏洞POC管理、团队授权化漏洞管理、漏洞验证利用、漏洞批量利用框架。
  ☆244Jan 19, 2023Updated 3 years ago
• lintstar / CS-AutoPostChain

  View on GitHub
  基于 OPSEC 的 CobaltStrike 后渗透自动化链
  ☆451Mar 11, 2024Updated 2 years ago
• xsshim / GzWebsocket

  View on GitHub
  哥斯拉webshell管理工具的插件，用于连接websocket型webshell
  ☆184Apr 17, 2024Updated 2 years ago
• Deploy on Railway without the complexity - Free Credits Offer • Ad
  Connect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
• tpt11fb / AttackTomcat

  View on GitHub
  Tomcat常见漏洞GUI利用工具。CVE-2017-12615 PUT文件上传漏洞、tomcat-pass-getshell 弱认证部署war包、弱口令爆破、CVE-2020-1938 Tomcat AJP文件读取/包含
  ☆257Nov 15, 2022Updated 3 years ago
• ExpLangcn / Payload-List

  View on GitHub
  整理SQLI、XSS、RCE、Path的payload文件备份留存
  ☆15Nov 9, 2022Updated 3 years ago
• TheBeastofwar / JenkinsExploit-GUI

  View on GitHub
  一款Jenkins的综合漏洞利用工具
  ☆472Mar 20, 2024Updated 2 years ago
• safe1024 / apollolnk

  View on GitHub
  ApolloLnk 是一款功能强大的 Windows LNK 快捷方式生成工具，支持参数隐藏、图标伪造、文件打包等多种高级功能，适用于安全研究、渗透测试等场景。
  ☆43Jan 12, 2026Updated 7 months ago
• cheetah-lab / Ghost-Attack-Suite

  View on GitHub
  GAS 漏洞利用框架
  ☆27Mar 25, 2022Updated 4 years ago
• getpanic / code_scan

  View on GitHub
  代码审计关键词扫描工具
  ☆11Apr 29, 2024Updated 2 years ago
• evilc0deooo / SwaggerHound

  View on GitHub
  自动化检测 Swagger API 接口未授权访问漏洞工具
  ☆63Mar 10, 2025Updated last year
• FunnyWolf / Caesar

  View on GitHub
  一个全新的敏感文件发现工具
  ☆54Jan 4, 2021Updated 5 years ago
• zeoxisca / gamma-gui

  View on GitHub
  a tool help you write gamma poc
  ☆110Mar 17, 2023Updated 3 years ago
• Managed Database hosting by DigitalOcean • Ad
  PostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
• ifacker / cscan-go

  View on GitHub
  cscan-go 版本，主要用于C段扫描，信息收集、红队横向渗透等...（相信我，点进来不会后悔的！）
  ☆97Apr 28, 2024Updated 2 years ago
• Conan924 / GodInfo

  View on GitHub
  GodInfo 是一个功能全面的后渗透信息和凭据收集工具，旨在帮助安全测试人员在获得授权访问权限后，快速收集目标系统的信息和凭据。
  ☆257Apr 29, 2025Updated last year
• misaka19008 / PerlinPuzzle-Webshell-PHP

  View on GitHub
  使用分支对抗技术制作的PHP Webshell，截止2024年1月18日，共数十个查杀引擎免杀
  ☆302Jun 11, 2025Updated last year
• Mangofang / BypassLoad

  View on GitHub
  shellcode免杀加载器，过主流杀软
  ☆149Sep 29, 2024Updated last year
• asaotomo / CVE-2021-42013-Apache-RCE-Poc-Exp

  View on GitHub
  Apache 远程代码执行 （CVE-2021-42013）批量检测工具：Apache HTTP Server是美国阿帕奇（Apache）基金会的一款开源网页服务器。该服务器具有快速、可靠且可通过简单的API进行扩充的特点，发现 Apache HTTP Server 2.4…
  ☆10Dec 24, 2021Updated 4 years ago
• G0mini / Jmc_Tools

  View on GitHub
  分享极梦C团队写的一些使用工具
  ☆58Nov 6, 2023Updated 2 years ago
• xjsafe / MimikatzBypass

  View on GitHub
  新免杀方向 Mimikatz（猕猴桃） 免杀 360，火绒，电脑管家，WindowsDefinder，详细使用教程请参考博客：https://www.vpss.cc/381.html
  ☆26Mar 4, 2024Updated 2 years ago