the most tips and tricks for bypass xss (eventhandlers, tags, popup)

Optimize your web vulnerability assessments with PassiveDigger, a comprehensive Burp Suite extension that specializes in passive traffic analysis. Detect potential vulnerabilities, get actionable insights, and supercharge your security audits.

im into metaploit,cross-script-injections,basically web-based attacks. i enjoy learning how the code operates inside a website while exploiting its weaknesses

An HTML parser for lua， Xss interception engine

🔒| Evaluating the security (exploiting and fixing vulnerabilities) of Open eClass 2.3 (University of Athens) platform.

XSS Vulnerability Tool In Perl

SecZz is an advanced toolkit meticulously crafted to fortify the security of Apache HTTP Server configurations. This toolkit features a collection of powerful scripts designed to address a spectrum of security concerns, providing users with a seamless and user-friendly interface for configuring and safeguarding their Apache servers.

Context-Sensitive Auto-Sanitization for PHP

Tweeter is a 'Twitter' clone built using HTML, CSS, JavaScript, jQuery, and AJAX for the front-end, and Node.js and Express.js for the back-end. This project was developed as part of the Lighthouse Labs Web Development Flex Program curriculum

A PHP Library for Cryptographically Secure Token Generation and Management

A collection of security tools for pentersion testing

Google Chrome extension to detect and prevent Reflected XSS via special crafted URLs

Scans a relational database for possible XSS tainted data

Xssing is a simple semantic analysis based on the location of the vulnerability, to determine the existence of the vulnerability, and use chromium to verify that xss is existed.

🔓 Site vulnerável à ataques SQL INJECTION e XSS

Exercises for machine learning techniques with various datasets

Xss-scanner, kullanıcıdan aldığı url içeriğindeki formu taramak için, sitedeki tum html'i bs4 ve request yardimiyla ceker ve de duzenler. Ardindan html icerisinden form kismini alir, onun icerisinden de input taglarini ceker...

Midnight is bash script that conducts subdomain enumeration and attack surface mapping and then tests for XSS with payload injection and reflection verification, it also tests for local file inclusion and SQL injection with a comprehensive library of over 300 payloads.

XSS Finder

Detector of DOM based XSS