This project aims to provide a comprehensive resource for understanding and testing Cross-Site Scripting (XSS) vulnerabilities, one of the OWASP Top 10 security risks. It is designed to be a useful resource for security researchers, penetration testers, and developers.
☆110Jan 10, 2026Updated 4 months ago
Alternatives and similar repositories for xss-payload-list
Users that are interested in xss-payload-list are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Golang tool to scan hosts for SMB version and signing status☆15Nov 19, 2024Updated last year
- Collection of Cyber Threat Intelligence sources from the deep and dark web☆16Sep 10, 2025Updated 8 months ago
- ☆18Nov 25, 2025Updated 6 months ago
- A tool to exploit the hash length extension attack in various hashing algorithms☆10Apr 14, 2014Updated 12 years ago
- Colored Cat is a syntax highlighter file reader.☆15Jun 21, 2024Updated last year
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Interactive XSS Labs to get into Client-Side Hacking☆90Feb 25, 2026Updated 3 months ago
- ☆12Updated this week
- Proof of Concept for CVE-2025-31161 / CVE-2025-2825☆47Apr 8, 2025Updated last year
- Easily convert WhatsApp chats to HTML for offline printing or archiving.☆82Nov 7, 2025Updated 7 months ago
- Africana Framework is an open-source, community-driven cybersecurity toolkit designed for ethical penetration testing & vulnerability ass…☆44Feb 22, 2026Updated 3 months ago
- PoCs for CVE-2020-11108; an RCE and priv esc in Pi-hole☆27May 10, 2020Updated 6 years ago
- ☆20Jun 19, 2025Updated 11 months ago
- Sistema simples de controle de estoque☆19Jan 25, 2021Updated 5 years ago
- DoomScope framework - Automated Web Security/Recon Scanner☆88Dec 22, 2025Updated 5 months ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- ORDER - A small Python web-app to practice blind SQLi in order by☆22Mar 21, 2021Updated 5 years ago
- Pre-compiled builds for CVE-2021-4034☆28Mar 30, 2022Updated 4 years ago
- 👋 My Profile 👨💻☆34Feb 2, 2022Updated 4 years ago
- Build kernel modules for WSL2 distros☆35Jan 28, 2023Updated 3 years ago
- SuperClaw: Red-Team AI Agents Before They Red-Team You☆235Feb 2, 2026Updated 4 months ago
- Exploit to bypass Xiongmai surveillance camera authentication mechanism☆33Oct 7, 2025Updated 8 months ago
- File Crawler index files and search hard-coded credentials☆36Feb 8, 2025Updated last year
- Federated Office365 user enumeration based on correlated response trend analysis☆49May 3, 2022Updated 4 years ago
- Fedora 31 netkit-telnet-0.17 telnetd remote exploit☆42Mar 4, 2020Updated 6 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- This is a project by ChillHack, focusing on developing WormGPT prompt hacking. It is designed for cybersecurity researchers to study adva…☆108Sep 27, 2025Updated 8 months ago
- Repo containing links to all CTF Challenges used in the 2018 MITRE CTF. http://mitrecyberacademy.org/☆62Oct 8, 2018Updated 7 years ago
- Obsidian vault with writeups for HackTheBox/Proving Grounds boxes and cheatsheets for CPTS/OSCP preparation.☆42Sep 8, 2025Updated 9 months ago
- This repo will contain the material for reversing flutter applications.☆54Jul 23, 2025Updated 10 months ago
- GitLab User Enumeration☆63Jan 3, 2025Updated last year
- Keycloak security scanner☆64Jul 6, 2024Updated last year
- A small executable to trick a user to authenticate using code matching MFA☆68Oct 6, 2023Updated 2 years ago
- ☆56Oct 31, 2025Updated 7 months ago
- Microsoft Telnet Client MS-TNAP Server-Side Authentication Token Exploit☆63Feb 2, 2026Updated 4 months ago
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- GarudRecon automates domain recon with top open-source tools to discover assets, enumerate subdomains, and detect XSS, SQLi, LFI, RCE & m…☆262Mar 28, 2026Updated 2 months ago
- Brute force para senhas linux☆47Jan 11, 2023Updated 3 years ago
- A BloodHound OpenGraph collector that models Windows local privilege escalation as interconnected attack paths.☆491Apr 26, 2026Updated last month
- Obtain GraphQL API schema despite disabled introspection!☆69Mar 11, 2026Updated 2 months ago
- SQL Injection Tool☆75Sep 19, 2014Updated 11 years ago
- A script to follow and unfollow people from GitHub.☆52Feb 9, 2026Updated 4 months ago
- List of Hello World programs in many programming languages. Don't forget to star 🌟 this repository.☆53Jan 20, 2025Updated last year