xss-vulnerability 开源项目推荐（394 个）

ssl /ezXSS

ezXSS是渗透测试人员和错误赏金猎人测试（盲目）跨站点脚本的简单方法。

t3l3machus /toxssin

An XSS exploitation command-line interface and payload generator.

robotshell /magicRecon

MagicRecon是一个功能强大的shell脚本，可以最大限度地提高目标的侦察和数据收集过程，并找到常见的漏洞，所有这些都可以将以有组织的方式获得的结果保存在目录中并以各种格式保存。

pwn0sec /PwnXSS

PwnXSS: Vulnerability (XSS) scanner exploit

TheKingOfDuck /easyXssPayload

Xss有效载荷列表。 使用情况：

abhisharma404 /vault

swiss army knife for hackers

kleiton0x00 /ppmap

A scanner/exploitation tool written in GO, which leverages client-side Prototype Pollution to XSS by exploiting known gadgets.

tangxiaofeng7 /SecExample

JAVA 漏洞靶场 (Vulnerability Environment For Java)

swisskyrepo /DamnWebScanner

Another web vulnerabilities scanner, this extension works on Chrome and Opera

OWASP /Vulnerable-Web-Application

OWASP Vulnerable Web Application Project https://github.com/hummingbirdscyber

theinfosecguy /QuickXSS

Automating XSS using Bash

tegal1337 /0l4bs

Cross-site scripting labs for web application security enthusiasts

pikpikcu /XRCross

XRCross 是一款重建、扫描器，以及用于渗透/BugBounty 测试的工具。该工具旨在测试（XSS|SSRF|CORS|SSTI|IDOR|RCE|LFI|SQLI）漏洞

iamunixtz /LazyXss

Automation tool to testing and confirm the xss vulnerability.

dotboris /vuejs-serverside-template-xss

Demo of a Vue.js app that mixes both clientside templates and serverside templates leading to an XSS vulnerability

Jewel591 /xssmap

XSSMap 是一款基于 Python3 开发用于检测 XSS 漏洞的工具

yaph /domxssscanner

DOMXSS Scanner is an online tool to scan source code for DOM based XSS vulnerabilities

R0X4R /D4rkXSS

A list of useful payloads and Bypass for Web Application Security and Bug Bounty/CTF

blackhatethicalhacking /XSSRocket

XSSRocket it is a tool designed for offensive security and XSS (Cross-Site Scripting) attacks.

thenurhabib /collector

Collect XSS vulnerable parameters from entire domain.