746 Open source projects that are alternatives of or similar to Tiny Xss Payloads

🎯 Cross Site Scripting ( XSS ) Vulnerability Payload List

XSS Payload without Anything.

🎯 SQL Injection Payload List

A container repository for my public web hacks!

Automating XSS using Bash

XSS in pastebin.com and reddit.com via unsanitized markdown output

Tool to bypass 40X response codes.

🎯 RFI/LFI Payload List

A collection of Burpsuite Intruder payloads, BurpBounty payloads, fuzz lists, malicious file uploads and web pentesting methodologies and checklists.

🌘🦊 DalFox(Finder Of XSS) / Parameter Analysis and XSS Scanning tool based on golang

Payload Arsenal for Pentration Tester and Bug Bounty Hunters

A Python based web application scanner to gather OSINT and fuzz for OWASP vulnerabilities on a target website.

reconFTW is a tool designed to perform automated recon on a target domain by running the best set of tools to perform scanning and finding out vulnerabilities

A tool to check a bunch of URLs that contain reflecting params.

Xss Payload Generator ~ Xss Scanner ~ Xss Dork Finder

Decode All Bases - Base Scheme Decoder

Top disclosed reports from HackerOne

No description or website provided.

Hacking tools

🎯 XML External Entity (XXE) Injection Payload List

A list of useful payloads for Web Application Security and Pentest/CTF

Vaf is a cross-platform very advanced and fast web fuzzer written in nim

Framework for rapid development and reusable of security tools

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

A fast DOM based XSS vulnerability scanner with simplicity.

bXSS is a utility which can be used by bug hunters and organizations to identify Blind Cross-Site Scripting.

A big list of Android Hackerone disclosed reports and other resources.

ezXSS is an easy way for penetration testers and bug bounty hunters to test (blind) Cross Site Scripting.

All about bug bounty (bypasses, payloads, and etc)

🎯 Server Side Template Injection Payloads

Toolset for detecting reflected xss in websites

Git All the Payloads! A collection of web attack payloads.

A list of interesting payloads, tips and tricks for bug bounty hunters.

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

Cross-site scripting labs for web application security enthusiasts

Multithreaded Plugin based vulnerability scanner for mass detection of web-based applications vulnerabilities

Collection of small security tools, mostly in Bash and Python. CTFs, Bug Bounty and other stuff.

Powerfull XSS Scanning and Parameter analysis tool&gem

A virtual host scanner that performs reverse lookups, can be used with pivot tools, detect catch-all scenarios, work around wildcards, aliases and dynamic default pages.

Easily turn single threaded command line applications into a fast, multi-threaded application with CIDR and glob support.

Browser's XSS Filter Bypass Cheat Sheet

For effective cheating detection in competitions. Utilizes Linux Kernel Module (LKM) for generating flags.

A list of resources for those interested in getting started in bug bounties

Spoilerwall introduces a brand new concept in the field of network hardening. Avoid being scanned by spoiling movies on all your ports!

A tool to find subdomains and interesting things hidden inside, external Javascript files of page, folder, and Github.

Firewall bypass script based on DNS history records. This script will search for DNS A history records and check if the server replies for that domain. Handy for bugbounty hunters.

Dump exposed HTTP .git fast

Self-deployable file hosting service for red teamers, allowing to easily upload and share payloads over HTTP and WebDAV.

repo with challenge material for riceteacatpanda (2020)

CTF Training 经典赛题复现环境

StaCoAn is a crossplatform tool which aids developers, bugbounty hunters and ethical hackers performing static code analysis on mobile applications.

Small tool to package javascript into a valid image file.

Educational, CTF-styled labs for individuals interested in Memory Forensics

List of advanced XSS payloads

DEFCON 2018 Qualification writeups

⚡ Automatically decrypt encryptions without knowing the key or cipher, decode encodings, and crack hashes ⚡

Multi Tool Subdomain Enumeration

Web path scanner

Advanced dork Search & Mass Exploit Scanner