Welcome to the repository of comprehensive solutions for bWAPP's Cross-Site Scripting (XSS) challenges, meticulously curated and solved by BugBot19 (Nihar Rathod). This repository serves as a one-stop resource for anyone looking to understand and solve XSS vulnerabilities in the bWAPP (Buggy Web Application) framework.

CVE-2023-29489 is a vulnerability to exploitable in cross-site scripting ( xss ) reflect the cpanel

CTF challenge based on the IT Security course of the Adolfo Ibáñez University 2024/1. Mix of SQL Injection, XSS, Cryptography and Session Cookie hijacking.

This is only for educational purposes. We won't take responsibility for any kind of damage made using these tools. We recommend using a VPN.

An XSS Exploitation Tool

Hydra XSS Injector for every website (bypasses cloudflare blacklist)

JAMXSS (Just A Monster XSS Scanner) is a state-of-the-art tool designed to test for reflected XSS (Cross-Site Scripting) vulnerabilities in web applications. By leveraging machine learning, JAMXSS offers an innovative approach to detecting and mitigating security risks with exceptional accuracy and efficiency.

A web application designed to test for Cross-Site Scripting (XSS) vulnerabilities securely. This site provides a platform to simulate XSS attacks and evaluate website security.

This project is a personal learning, so you will find errors or disorganization :)

PoC - Exploit Delivery via Steganography and Polyglots, CVE-2014-0282

Repositorio donde alojo información relevante acerca de las vulnerabilidades más conocidas.

This is a project involving the setting up a penetration testing environment using Kali Linux and Metasploitable2 to practice and exploit common vulnerabilities such as SQL Injection, Command Injection, and Cross-Site Scripting (XSS). Tools used include Nmap, BurpSuite, and SQLmap.

ezXSS is an easy way for penetration testers and bug bounty hunters to test (blind) Cross Site Scripting.

[POC] Repo of XSS payloads you can try when using Trackmania 1's playerpage

Simple utility to generate XSS-based stealers

Little Python script for reflected XSS exploit targeting web applications.

Advanced XSS Detection Suite - Docker image (Multiarch)

Performed XSS attacks on vulnerable web pages,leveraging Kali Linux,Burp Suite,and DVWA for practical learning.Exploited weak- ness for proactive security enhancement,enhancing knowledge in safeguarding web applications.In addition to this worked on WIFI hacking using network adaptor which supports Monitor mode and Packet Injection

This is a NextLevelFood App

llm attacks basic payloads