#xss (30 Repositories)
Ranked open-source repositories tagged with #xss, scored by pull request acceptance likelihood and maintainer engagement velocity.
36.6%
18.7h
30 repositories tagged #xss
hahwul/dalfox
🌙🦊 Dalfox is a powerful open-source XSS scanner and utility focused on automation.
DenisPodgurskii/pentestkit
OWASP PTK - application security browser extension.
kkomelin/isomorphic-dompurify
Use DOMPurify on server and client in the same way
dschadow/JavaSecurity
Java web and command line applications demonstrating various security topics
chaitin/SafeLine
SafeLine is a self-hosted WAF(Web Application Firewall) / reverse proxy to protect your web apps from attacks and exploits.
voku/anti-xss
㊙️ AntiXSS | Protection against Cross-site scripting (XSS) via PHP
mganss/HtmlSanitizer
Cleans HTML to avoid XSS attacks
OWASP/owasp-java-encoder
Contextual output encoding for Java 8+: HTML, JavaScript, CSS, XML and URI components. Zero-dependency core with optional JSP and Jakarta adapters.
LeSuisse/vue-dompurify-html
Safe replacement for the v-html directive
chennqqi/godnslog
An exquisite dns&http log server for verify SSRF/XXE/RFI/RCE vulnerability
cure53/DOMPurify
DOMPurify - a DOM-only, super-fast, uber-tolerant XSS sanitizer for HTML, MathML and SVG. DOMPurify works with a secure default, but offers a lot of configurability and hooks. Demo:
dromara/lamp-cloud
[灯灯]微服务中后台快速开发平台，支持jdk21、jdk17、jdk8，专注于多租户、开放平台解决方案，亦可作为普通项目（非SaaS架构）的基础开发框架使用，目前已实现插拔式数据库隔离、SCHEMA隔离、字段隔离 等租户隔离方案。
reddelexc/hackerone-reports
Top disclosed reports from HackerOne
mike-works/web-security-fundamentals
Mike North's Web Security Course
nette/latte
☕ Latte: the safest & truly intuitive templates for PHP. Engine for those who want the most secure PHP sites.
YalcinYolalan/WSSAT
WEB SERVICE SECURITY ASSESSMENT TOOL
hackademix/noscript
The popular NoScript Security Suite browser extension.
ImAyrix/fallparams
Find All Parameters - Tool to crawl pages, find potential parameters and generate a custom target parameter wordlist
raz-varren/xsshell
An XSS reverse shell framework
dr34mhacks/XSSNow
Find XSS payloads that actually work by filtering them based on real-world constraints instead of blind payload spraying.
dzonerzy/goWAPT
Go Web Application Penetration Test
YagamiiLight/Cerberus
一款功能强大的漏洞扫描器，子域名爆破使用aioDNS，asyncio异步快速扫描，覆盖目标全方位资产进行批量漏洞扫描，中间件信息收集，自动收集ip代理，探测Waf信息时自动使用来保护本机真实Ip，在本机Ip被Waf杀死后，自动切换代理Ip进行扫描，Waf信息收集(国内外100+款waf信息)包括安全狗，云锁，阿里云，云盾，腾讯云等，提供部分已知waf bypass 方案，中间件漏洞检测(Thinkphp,weblogic等 CVE-2018-5955,CVE-2018-12613,CVE-2018-11759等)，支持SQL注入, XSS, 命令执行,文件包含, ssrf 漏洞扫描, 支持自定义漏洞邮箱推送功能
AntSwordProject/ant
实时上线的 XSS 盲打平台
kleiton0x00/XSScope
XSScope is one of the most powerful and advanced GUI Framework for Modern Browser exploitation via XSS.
tegal1337/0l4bs
Cross-site scripting labs for web application security enthusiasts
mazen160/xless
The Serverless Blind XSS App
andreiverse/vaf
Vaf is a cross-platform very advanced and fast web fuzzer written in nim
botesjuan/Burp-Suite-Certified-Practitioner-Exam-Study
Burp Suite Certified Practitioner Exam Study
dongfangyuxiao/BurpExtend
基于Burp插件开发打造渗透测试自动化
ericnorris/striptags
An implementation of PHP's strip_tags in Typescript.