🎯 Cross Site Scripting ( XSS ) Vulnerability Payload List

ezXSS is an easy way for penetration testers and bug bounty hunters to test (blind) Cross Site Scripting.

XssPayload List . Usage:

A tool to embed XXE and XSS payloads in docx, odt, pptx, xlsx files (oxml_xxe on steroids)

Xss Payload Generator ~ Xss Scanner ~ Xss Dork Finder

From XSS to RCE 2.75 - Black Hat Europe Arsenal 2017 + Extras

Solutions and write-ups from security-based competitions also known as Capture The Flag competition

NLP model and tech for cyber security tasks

Automated XSS Finder

DorkEye is a Python script for ethical dorking. The goal is to identify unintentionally exposed resources, such as sensitive files, login panels or indexed directories.

Foxss is a simple php based penetration Testing Tool.Currently it will help to find XSS vulnerability in websites.

The largest hacking program with new tools CVE-2023-PoC for the year 2023 It contains all the attack and exploitation tools for testing websites, as well as a graphical interface to facilitate its use for beginners

Scrippy is a browser extension that holds sql statements (think clip board) to aid devlopers in the testing of websites for basic code injections.

All Labs of the Security for Developers Training

Cross-site scripting labs for web application security enthusiasts

An ongoing curated collection of awesome XSS software, libraries, frameworks, learning tutorials & practical resources cross-site scripting.

An XSS reverse shell to control any website remotely using web sockets, along with an HTTP server to capture data

Lotus XSS

A tool that automatically detects XSS vulnerabilities.

AUR beef-xss