Static XSS audit skill with 14 layers of checks for React, TypeScript, and JavaScript projects.
☆566Oct 24, 2026Updated 3 weeks ago
Alternatives and similar repositories for xss-audit
Users that are interested in xss-audit are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Reusable prompts for a structured, evidence-first bug bounty hunting workflow☆938Oct 3, 2026Updated last month
- A web security workbench built for AI agents.☆394Updated this week
- Autonomous white-hat security auditor for AI-driven code review, bug bounty research, exploit construction, and execution-grounded verifi…☆527Oct 5, 2026Updated last month
- 由夜安团队研发的AI Agent渗透测试平台，引入分形覆叠的概念，强调自监督，自循环，自进化（分形）首创寻宝机制、三段式上升结构（覆叠），此项目主要探索在可控环境（CTF）下的能力☆733Updated this week
- The first fruit of the Nüwa tree — an autonomous AI pentest legion (634-team champion, 8h unattended, 1B tokens beat 4.5B). Not just a to…☆2,083Updated this week
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- WindFtsy的WEB应用黑盒测试技能☆76Oct 8, 2026Updated last month
- ☆78Oct 20, 2026Updated 3 weeks ago
- Agent skill for rigorous bug bounty report triage, validation, severity escalation, and submission-ready reporting.☆151Oct 9, 2026Updated last month
- Exploit watch archive, an automated weekly gather of exploit sources 0/Nday releases☆89Updated this week
- Sectiv is a skill-driven AI security review for Burp Suite. Pick captured traffic and a review goal (IDOR, XSS, SQLi, SSRF…), and ge…☆114Nov 5, 2026Updated last week
- Open-source, self-hosted AI vulnerability research tool that orchestrates agents to find and validate security issues in code.☆2,431Updated this week
- Cairn is a general-purpose AI state-space search engine, validated first on autonomous penetration testing. Sometimes misspelled as Carin…☆5,144Sep 7, 2026Updated 2 months ago
- Burp Suite extension for API security testing with 15 attack types, 108+ payloads, intelligent fuzzing, BOLA/IDOR detection, AI integrati…☆378Aug 15, 2026Updated 2 months ago
- Google Gemini API key discovery and security scanning tool.☆43Nov 2, 2026Updated last week
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- ☆143Oct 26, 2026Updated 2 weeks ago
- ☆51Aug 17, 2026Updated 2 months ago
- Collection of documentation, tools, and tips related to vulnerability research.☆285Updated this week
- Web黑盒渗透测试技能☆143Jun 27, 2026Updated 4 months ago
- A php2shell exploit that requires no modifications to the official version, and does not require display_errors or limit_memory.☆1,573Nov 6, 2026Updated last week
- 企业暴露面收集与持续监控（ASM）自托管系统：多源采集、存活与指纹富化、风险线索与变更对照。支持 Linux/Docker 一键部署。☆50Sep 18, 2026Updated last month
- CVE-2026-88772 PoC: Citrix NetScaler ADC/Gateway DTLS memory overflow (RCE/DoS, CVSS 9.5). Fingerprints Gateway, build vs 14.1-73.37 / 13…☆13Oct 20, 2026Updated 3 weeks ago
- LuaN1aoAgent is a fully autonomous AI-driven penetration testing agent powered by graph-based cognitive reasoning.☆1,475Sep 15, 2026Updated 2 months ago
- 实战 SRC / 众测 / Bug bounty 漏洞挖掘 Claude Code skill — 19 个攻击类 playbook、305 个结构化 payload、263 个 WAF/EDR 绕过、2887 份 HackerOne 真实案例、88,636 WooYun …☆655May 24, 2026Updated 5 months ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- The system of action for AI-native cybersecurity—where intent becomes governed execution, evidence becomes operational memory, and every …☆8,629Updated this week
- AI-first external attack surface assessment with continuous discovery, evidence-based vulnerability validation, and developer-agent MCP i…☆718Updated this week
- The community's most comprehensive, continuously-updated index of research on Large Language Models for software vulnerability detection …☆1,597Updated this week
- ASC is a super FAST and lightweight Android decompiler designed for Agents/Mobile Researchers.☆2,698Oct 30, 2026Updated 2 weeks ago
- One verdict per IP, in plain words — evidence, confidence, geo & ASN fused from 60 public intel sources. 53/60 need no API key. One comma…☆38Updated this week
- CaA - Collector and Analyzer, Insight into information, exploring with intelligence in a thousand ways. 信息洞察，智探千方！☆1,532May 25, 2026Updated 5 months ago
- Claude Code plugin for writing triager-grade bug bounty reports☆375Aug 25, 2026Updated 2 months ago
- A raw dump of my Apple MacOS research. Some likely can be ported over to other Apple OSes. Alot of this should likely be patched, but I d…☆511Nov 8, 2026Updated last week
- Scans remote JavaScript files with Trufflehog + Semgrep to detect leaked secrets☆147Jan 21, 2025Updated last year
- Deploy open-source AI quickly and easily - Special Bonus Offer • AdRunpod Hub is built for open source. One-click deployment and autoscaling endpoints without provisioning your own infrastructure.
- 基于 DeepSeek Harness 的多 Agent PTES 渗透测试编排插件，支持自动化侦察、漏洞分析、验证与报告，使用 Docker/Kali 隔离工具箱 | Multi-agent PTES penetration testing plugin for Deep…☆102Oct 28, 2026Updated 2 weeks ago
- ScopeSentry-Cyberspace mapping, subdomain enumeration, port scanning, sensitive information discovery, vulnerability scanning, distribute…☆2,390Oct 11, 2026Updated last month
- A complete bug bounty workspace for HackerOne researchers. Includes scope enforcement, automated recon/vuln pipeline (400+ tools), report…☆495Oct 14, 2026Updated last month
- The agentic pentesting environment that lives on your machine. AI agent teams, visual workflows and your own tools, 100% local.☆141Updated this week
- wooyun-legacy skill for claude code☆1,792Jul 14, 2026Updated 4 months ago
- Claude Code RedTeam Skill — Hypothesis-Driven Cognitive Architecture。一个假设-证据驱动的红队skill☆330Aug 3, 2026Updated 3 months ago
- Recon & pentest skill pack. CORS, XSS, SQLi, SSRF, RCE, WordPress, MCP, cloud, subdomain takeover, and more. Field-tested. MIT. Full writ…☆1,367Nov 7, 2026Updated last week
Are these results useful?