XS-Leaks Wiki
☆178Mar 13, 2026Updated last week
Alternatives and similar repositories for wiki
Users that are interested in wiki are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- A collection of browser-based side channel attack vectors.☆760Mar 19, 2024Updated 2 years ago
- XS-Leak Browser Test Suite☆86Dec 19, 2023Updated 2 years ago
- CTF writeups☆30May 27, 2022Updated 3 years ago
- Find XS-Leaks in the browser by diffing DOM-Graphs in two states☆18Jan 20, 2025Updated last year
- Inti easter challenge poc☆18May 4, 2021Updated 4 years ago
- Searcher for cross-site leaks (XS-Leaks)☆81Dec 27, 2022Updated 3 years ago
- Awesome MXSS ??☆56Sep 30, 2024Updated last year
- research☆152Mar 21, 2024Updated 2 years ago
- Client Side Prototype Pollution Scanner☆523Sep 17, 2022Updated 3 years ago
- Challenge repository for the watevrCTF 2019 CTF competition☆37Jun 6, 2022Updated 3 years ago
- ☆10Nov 23, 2021Updated 4 years ago
- ☆695Jul 4, 2022Updated 3 years ago
- Client-Side Prototype Pollution Tools☆87Sep 21, 2021Updated 4 years ago
- Content-Type Research☆658Jun 29, 2025Updated 8 months ago
- Prototype Pollution and useful Script Gadgets☆1,601Jan 27, 2024Updated 2 years ago
- Code for our 2023 IEEE S&P Paper "The Leaky Web: Automated Discovery of Cross-Site Information Leaks in Browsers and the Web"☆14Dec 12, 2024Updated last year
- Chrome extension to detect possible xsleaks☆12May 4, 2019Updated 6 years ago
- Generate DOM clobbering attack vectors for you.☆35Jun 3, 2025Updated 9 months ago
- ☆705Nov 27, 2024Updated last year
- List of Trusted Types bypasses☆102Apr 15, 2024Updated last year
- Some research on UXSS vulnerabilities in web browsers☆12May 14, 2018Updated 7 years ago
- CTF challenges I created 🚩☆79Mar 7, 2026Updated 2 weeks ago
- Same Origin XSS challenge☆64Apr 7, 2022Updated 3 years ago
- ☆50Aug 2, 2025Updated 7 months ago
- A Chrome Extension to track postMessage usage (url, domain and stack) both by logging using CORS and also visually as an extension-icon☆1,296Jan 26, 2024Updated 2 years ago
- justCTF 2023 challenges sources☆20Jun 26, 2023Updated 2 years ago
- Issues with WebSocket reverse proxying allowing to smuggle HTTP requests☆392Aug 15, 2024Updated last year
- A collection of tiny XSS Payloads that can be used in different contexts. https://tinyxss.terjanq.me☆2,328Nov 29, 2024Updated last year
- ☆32Sep 6, 2021Updated 4 years ago
- ☆26Feb 16, 2021Updated 5 years ago
- The full set of files that supported TSG CTF challenges☆32Dec 8, 2019Updated 6 years ago
- HTTPLeaks - All possible ways, a website can leak HTTP requests☆2,103Jan 3, 2026Updated 2 months ago
- A small pentesting lab for Azure☆10Apr 19, 2019Updated 6 years ago
- OWASP ZAP add-on to detect reflected parameter vulnerabilities efficiently☆12Feb 19, 2021Updated 5 years ago
- [Tool] Forge PHP FastCGI protocol to RCE with strict disable_functions☆64Jun 7, 2019Updated 6 years ago
- Generates permutations, alterations and mutations of subdomains. Auto Resolve what we find.☆11Dec 8, 2020Updated 5 years ago
- ☆44Apr 30, 2021Updated 4 years ago
- Collections of Orange Tsai's public presentation slides.☆751Jan 1, 2025Updated last year
- Reverse proxies cheatsheet☆1,855Nov 4, 2023Updated 2 years ago