pgaijin66 / XSS-Payloads
This repository holds all the list of advanced XSS payloads that can be used in penetration testing. These payloads can be loaded into XSS scanners as well.
☆1,064Updated 10 months ago
Alternatives and similar repositories for XSS-Payloads
Users that are interested in XSS-Payloads are comparing it to the libraries listed below
Sorting:
- List of XSS Vectors/Payloads☆1,228Updated 4 months ago
- ezXSS is an easy way for penetration testers and bug bounty hunters to test (blind) Cross Site Scripting.☆2,020Updated this week
- Totally Automatic LFI Exploiter (+ Reverse Shell) and Scanner☆1,815Updated 3 years ago
- Automatic SSRF fuzzer and exploitation tool☆3,196Updated 2 months ago
- Burp Bounty (Scan Check Builder in BApp Store) is a extension of Burp Suite that allows you, in a quick and simple way, to improve the ac…☆1,724Updated last year
- This script is intended to automate your reconnaissance process in an organized fashion☆1,965Updated 3 years ago
- The XSS Hunter service - a portable version of XSSHunter.com☆1,523Updated 2 years ago
- A script to set up a quick Ubuntu 17.10 x64 box with tools I use.☆1,196Updated 10 months ago
- SSRF (Server Side Request Forgery) testing resources☆2,400Updated 7 months ago
- Server-Side Template Injection and Code Injection Detection and Exploitation Tool☆3,932Updated last year
- 🎯 XML External Entity (XXE) Injection Payload List☆1,174Updated 9 months ago
- A curated list of amazingly awesome Burp Extensions☆3,173Updated 3 months ago
- A collection of Burpsuite Intruder payloads, BurpBounty payloads, fuzz lists, malicious file uploads and web pentesting methodologies and…☆3,787Updated 3 years ago
- Cross Site "Scripter" (aka XSSer) is an automatic -framework- to detect, exploit and report XSS vulnerabilities in web-based applications…☆1,307Updated 7 months ago
- The Prime Cross Site Request Forgery (CSRF) Audit and Exploitation Toolkit.☆1,208Updated 3 months ago
- A python script that finds endpoints in JavaScript files☆3,940Updated last year
- XSS payloads designed to turn alert(1) into P1☆1,362Updated last year
- 🔱 Powerfull XSS Scanning and Parameter analysis tool&gem☆1,275Updated 2 years ago
- Generates permutations, alterations and mutations of subdomains and then resolves them☆2,408Updated 4 months ago
- Smuggler - An HTTP Request Smuggling / Desync testing tool written in Python 3☆1,947Updated last year
- A container repository for my public web hacks!☆1,990Updated 2 years ago
- This is a collection of writeups, cheatsheets, videos, books related to SSRF in one single location☆1,254Updated 4 years ago
- Take a list of domains and probe for working HTTP and HTTPS servers☆3,000Updated 10 months ago
- ☆2,261Updated last year
- Quick SQLMap Tamper Suggester☆1,373Updated 2 years ago
- Automated & Manual Wordlists provided by Assetnote☆1,435Updated 9 months ago
- Compilation of commands, tips and scripts that helped me throughout Vulnhub, Hackthebox, OSCP and real scenarios☆1,344Updated 2 years ago
- BBT - Bug Bounty Tools (examples💡)☆1,802Updated last year
- This tool generates gopher link for exploiting SSRF and gaining RCE in various servers☆3,072Updated 2 years ago
- 🎯 Fast CORS misconfiguration vulnerabilities scanner☆1,088Updated 3 years ago