xss-exploitation 开源项目推荐（208 个）

ssl /ezXSS

ezXSS是渗透测试人员和错误赏金猎人测试（盲目）跨站点脚本的简单方法。

t3l3machus /toxssin

An XSS exploitation command-line interface and payload generator.

n00py /WPForce

Wordpress Attack Suite

shelld3v /JSshell

JSshell - JavaScript reverse/remote shell

ajinabraham /OWASP-Xenotix-XSS-Exploit-Framework

OWASP Xenotix XSS Exploit Framework is an advanced Cross Site Scripting (XSS) vulnerability detection and exploitation framework.

kleiton0x00 /ppmap

A scanner/exploitation tool written in GO, which leverages client-side Prototype Pollution to XSS by exploiting known gadgets.

Varbaek /xsser

From XSS to RCE 2.75 - Black Hat Europe Arsenal 2017 + Extras

tegal1337 /0l4bs

Cross-site scripting labs for web application security enthusiasts

raz-varren /xsshell

An XSS reverse shell framework

dr34mhacks /XSSNow

Find XSS payloads that actually work by filtering them based on real-world constraints instead of blind payload spraying.

Jewel591 /xssmap

XSSMap 是一款基于 Python3 开发用于检测 XSS 漏洞的工具

DenisPodgurskii /pentestkit

OWASP PTK - application security browser extension.

shadow-workers /shadow-workers

Shadow Workers is a free and open source C2 and proxy designed for penetration testers to help in the exploitation of XSS and malicious Service Workers (SW)

ihebski /XSS-Payloads

Collection of XSS Payloads for fun and profit

doyensec /Session-Hijacking-Visual-Exploitation

Session Hijacking Visual Exploitation

R0X4R /D4rkXSS

A list of useful payloads and Bypass for Web Application Security and Bug Bounty/CTF

blackhatethicalhacking /XSSRocket

XSSRocket it is a tool designed for offensive security and XSS (Cross-Site Scripting) attacks.

thenurhabib /collector

Collect XSS vulnerable parameters from entire domain.

moeinfatehi /xss_vulnerability_challenges

Dockerized PHP lab with XSS (cross-site scripting) challenges and filter-bypass examples for practising web exploitation.

kagurazakasanae /SuperXSS

Make XSS Great Again