weaponised-XSS-payloads

XSS payloads

A collection of JavaScript files designed to exploit vulnerabilities in popular CMS platforms

XSS payloads designed to turn alert(1) into P1

GitHub

1k stars
46 watching
216 forks
Language: JavaScript
last commit: about 3 years ago
Linked from 1 awesome list


Backlinks from these awesome lists:

Related projects:

RepositoryDescriptionStars
mik0w/pallmsA collection of payloads designed to exploit vulnerabilities in large language models.70
bugbountyforum/xss-radarA tool designed to detect and exploit reflected cross-site scripting (XSS) vulnerabilities in web applications.321
asaiken/dom-based-xss-finderTools for identifying and exploiting vulnerabilities in DOM-based cross-site scripting attacks.71
payloadcms/payloadA fullstack Next.js framework for building headless CMS applications with instant backend superpowers29,681
hahwul/xspearAutomated testing tool for identifying vulnerabilities in web applications via cross-site scripting (XSS) attacks1,215
evilcos/xssor2A tool designed to demonstrate cross-site scripting (XSS) vulnerabilities and exploits using JavaScript and Django.2,141
0kman/xss-cheatsheetAn extension that incorporates PortSwigger's Cross-site scripting cheat sheet into Burp, allowing users to easily find and use XSS payloads.3
kiwicom/xssableA vulnerable blogging platform demonstrating various XSS vulnerabilities to showcase security weaknesses and demonstrate exploitation techniques.9
swisskyrepo/payloadsallthethingsA comprehensive collection of tools and techniques for web application security testing and exploitation61,904
offsecginger/aes-powershellcodeA PowerShell payload designed to evade detection and execute malicious commands on a target system108
xorrior/macostoolsA collection of tools and libraries for creating and executing malicious payloads on macOS263
hipotermia/vaya-ciego-nenDetects and exploits Blind Cross-site scripting (XSS) vulnerabilities to retrieve sensitive information and control user interactions.41
rantanen/eslint-plugin-xssDetects potential cross-site scripting vulnerabilities in JavaScript code to prevent XSS issues.66
mandatoryprogrammer/xsshunter_clientAn instrument used to hunt and identify cross-site scripting (XSS) vulnerabilities by tracking correlated requests and payloads.250
0xsobky/hackvaultA container repository for storing and sharing public web hacking techniques and tools.1,953