191 Open source projects that are alternatives of or similar to Veneno

Automating XSS using Bash

DOMPurify - a DOM-only, super-fast, uber-tolerant XSS sanitizer for HTML, MathML and SVG. DOMPurify works with a secure default, but offers a lot of configurability and hooks. Demo:

Python library and CLI for the Bug Bounty Recon API

Small tool to package javascript into a valid image file.

A tool to check a bunch of URLs that contain reflecting params.

🐈Medusa是一个红队武器库平台，目前包括扫描功能(200+个漏洞)、XSS平台、协同平台、CVE监控等功能，持续开发中 http://medusa.ascotbe.com

The Serverless Blind XSS App

List of advanced XSS payloads

A Burpsuite plugin (BApp) to aid in the detection of scripts being loaded from over 23000 malicious cryptocurrency mining domains (cryptojacking).

☕ Latte: the intuitive and fast template engine for those who want the most secure PHP sites.

XSScope is one of the most powerful and advanced GUI Framework for Modern Browser exploitation via XSS.

Cross Site "Scripter" (aka XSSer) is an automatic -framework- to detect, exploit and report XSS vulnerabilities in web-based applications.

A list of useful payloads for Web Application Security and Pentest/CTF

Fast CORS misconfiguration vulnerabilities scanner🍻

Go Web Application Penetration Test

Powerfull XSS Scanning and Parameter analysis tool&gem

WAScan - Web Application Scanner

一款完善的安全评估工具，支持常见 web 安全问题扫描和自定义 poc | 使用之前务必先阅读文档

A jQuery augmented PHP library for creating secure HTML forms, and validating them easily

Runs the default Google Lighthouse tests with additional security tests

Open IP cameras in IPv4

PrestaShop (1.6.x <= 1.6.1.23 or 1.7.x <= 1.7.4.4) Back Office Remote Code Execution (CVE-2018-19126)

🕷️ A Git source leak exploit tool that restores the entire Git repository, including data from stash, for white-box auditing and analysis of developers' mind

HTTPS Frontend Hijack

Build Content-Security-Policy headers from a JSON file (or build them programmatically)

CS 253 Web Security course at Stanford University

Top disclosed reports from HackerOne

Awesome Node.js Security resources

A browser API to prevent DOM-Based Cross Site Scripting in modern web applications.

Xss Payload Generator ~ Xss Scanner ~ Xss Dork Finder

🕷️ XSS Listener is a penetration tool for easy to steal data with various XSS.

🏴‍☠️ Tools for pentesting, CTFs & wargames. 🏴‍☠️

xss漏洞模糊测试payload的最佳集合 2020版

bluemonday: a fast golang HTML sanitizer (inspired by the OWASP Java HTML Sanitizer) to scrub user generated content of XSS

Proactively protect your Node.js web services

HTTP Cache Poisoning Demo

From XSS to RCE 2.75 - Black Hat Europe Arsenal 2017 + Extras

DOMXSS Scanner is an online tool to scan source code for DOM based XSS vulnerabilities

The popular NoScript Security Suite browser extension.

Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework capable of performing static and dynamic analysis.

Web application vulnerability scanner

A service that can track data breaches like "Have I Been Pwned", but it is specific for Taiwan.

扫描器是来自GitHub平台的开源扫描器的集合，包括子域枚举、数据库漏洞扫描器、弱密码或信息泄漏扫描器、端口扫描器、指纹扫描器以及其他大规模扫描仪、模块扫描器等。对于其他著名的扫描工具，如：awvs、nmap，w3af将不包含在集合范围内。

A Router WiFi key recovery/cracking tool with a twist.

The OWASP Java Encoder is a Java 1.5+ simple-to-use drop-in high-performance encoder class with no dependencies and little baggage. This project will help Java web developers defend against Cross Site Scripting!

Awesome Object Capabilities and Capability Security

Awesome XSS stuff

pentest framework

bXSS is a utility which can be used by bug hunters and organizations to identify Blind Cross-Site Scripting.

JavaScript library for building web-based applications that employ secure multi-party computation (MPC).

java source code static code analysis and danger function identify prog

ezXSS is an easy way for penetration testers and bug bounty hunters to test (blind) Cross Site Scripting.

A fast DOM based XSS vulnerability scanner with simplicity.

Security Testing Scripts for JWT

nodejs + express security and performance boilerplate.

🖤 网络安全与渗透测试工具导航

Automated client-side template injection (sandbox escape/bypass) detection for AngularJS.

A collection of tiny XSS Payloads that can be used in different contexts. https://tinyxss.terjanq.me

🛡️ Make your web services secure by default !

Cross-site scripting labs for web application security enthusiasts