Alternatives and similar repositories for xss-labs:

Users that are interested in xss-labs are comparing it to the libraries listed below

• 1hack0 / bug-bounty-101
  Happy Hunting
  ☆137Updated 6 years ago
• PortSwigger / j2ee-scan
  J2EEScan is a plugin for Burp Suite Proxy. The goal of this plugin is to improve the test coverage during web application penetration tes…
  ☆74Updated 3 years ago
• p3n73st3r / Ghazi
  Ghazi is a BurpSuite Plugins For Testing various PayLoads Like "XSS,SQLi,SSTI,SSRF,RCE and LFI" through Different tabs , Where Each Tab W…
  ☆110Updated 6 years ago
• Lopseg / Jsdir
  Jsdir is a Burp Suite extension that extracts hidden paths from js files and beautifies it for further reading.
  ☆117Updated 4 years ago
• owtf / wafbypasser
  ☆78Updated 10 years ago
• jas502n / CVE-2019-11580
  CVE-2019-11580 Atlassian Crowd and Crowd Data Center RCE
  ☆106Updated 5 years ago
• jiangsir404 / Xss-Sql-Fuzz
  burpsuite 插件对GP所有参数(过滤特殊参数)一键自动添加xss sql payload 进行fuzz
  ☆61Updated 6 years ago
• C1h2e1 / Recon
  Easy Fast recon script
  ☆29Updated 5 years ago
• NytroRST / XSSFuzzer
  XSS Fuzzer is a tool which generates XSS payloads based on user-defined vectors and fuzzing lists.
  ☆141Updated 6 years ago
• theLSA / burp-sensitive-param-extractor
  burpsuite extension for check and extract sensitive request parameter
  ☆113Updated 4 years ago
• masahiro331 / CVE-2020-9484
  ☆127Updated 3 years ago
• jas502n / CVE-2019-11581
  Atlassian JIRA Template injection vulnerability RCE
  ☆93Updated 5 years ago
• bigsizeme / burplugin-java-rce
  ******本软件仅限用于学习交流禁止用于任何非法行为****** 本版本支持elasticsearch java语言远程命令执行及文件上传 elasticsearchgroov语言远程命令执行及文件上传 struts2-005、struts2-009、struts2-01…
  ☆111Updated 7 years ago
• PortSwigger / authz
  ☆106Updated 8 years ago
• Martin2877 / sqliv-M
  sqliv modified by Ali0th
  ☆13Updated 7 years ago
• jas502n / CVE-2019-12409
  Apache Solr RCE (ENABLE_REMOTE_JMX_OPTS="true")
  ☆101Updated 5 years ago
• Q2h1Cg / xss_scan
  XSS Scan
  ☆104Updated 11 years ago
• jas502n / CVE-2019-0232
  Apache Tomcat Remote Code Execution on Windows - CGI-BIN
  ☆76Updated 6 years ago
• firefart / CVE-2018-7600
  CVE-2018-7600 - Drupal 7.x RCE
  ☆71Updated 7 years ago
• arbazkiraak / web-cache-deception-checker
  Tool is to check for Cache Deception Attack Both For Authenticated and UnAuthenticated Pages
  ☆43Updated 3 years ago
• az0ne / jboss_autoexploit
  JBoss JMXInvokerServlet JMXInvoker 0.3 - Remote Command Execution​ 漏洞批量检测
  ☆67Updated 9 years ago
• StefanMichielse / generate_xxe_payloads
  This tool is just after the first refactoring pushed. Original is from Will Vandevanter (BuffaloWill). Only rearrange the code which will…
  ☆32Updated 8 years ago
• laconicwolf / Masscan-to-CSV
  Converts the Masscan XML output option (-oX) to a csv format.
  ☆56Updated 6 years ago
• NickstaDB / SerialBrute
  Java serialization brute force attack tool.
  ☆123Updated 7 years ago
• appsecco / json-flash-csrf-poc
  This repo contains the files required to perform a CSRF attack using Flash and HTTP 307 redirections.
  ☆76Updated 7 years ago
• CHYbeta / php_bugs
  PHP代码审计分段讲解
  ☆26Updated 7 years ago
• jas502n / CVE-2019-16278
  Directory transversal to remote code execution
  ☆69Updated 5 years ago
• Audi-1 / Awesome-Red-Teaming
  List of Awesome Red Teaming Resources
  ☆45Updated 7 years ago
• IdealDreamLast / CVE-2020-9484
  用Kali 2.0复现Apache Tomcat Session反序列化代码执行漏洞
  ☆52Updated 4 years ago
• g0rx / Drupal-SA-CORE-2019-003
  CVE-2019-6340-Drupal SA-CORE-2019-003
  ☆32Updated 6 years ago