132 Open source projects that are alternatives of or similar to vue-dompurify-html

Inclusive Angular API for DOMPurify

DOMPurify - a DOM-only, super-fast, uber-tolerant XSS sanitizer for HTML, MathML and SVG. DOMPurify works with a secure default, but offers a lot of configurability and hooks. Demo:

Hooks in to interesting functions and helps reverse the web app faster.

Xss Payload Generator ~ Xss Scanner ~ Xss Dork Finder

Collection of quality safety articles. Awesome articles.

🎯 Cross Site Scripting ( XSS ) Vulnerability Payload List

Ary 是一个集成类工具，主要用于调用各种安全工具，从而形成便捷的一键式渗透。

A tool to check a bunch of URLs that contain reflecting params.

Filter user input for XSS but don't touch other html

Most advanced XSS scanner.

The Serverless Blind XSS App

pentest framework

WAScan - Web Application Scanner

An XSS reverse shell framework

Audit tool to find common vulnerabilities in PHP source code

Pretty vulnerable flask app..

Automating XSS using Bash

解析VIP资源，解析出酷狗、QQ音乐、腾讯视频、人人视频的真实地址

XSS HTTP Inject0r is a proof of concept tool that shows how XSS (Cross Site Scripting) flags can be exploited easily. It is written in HTML + Javascript + PHP and released under GPLv3.

A jQuery augmented PHP library for creating secure HTML forms, and validating them easily

A list of useful payloads for Web Application Security and Pentest/CTF

bug bounty hunters starter notes

Small but effective wordlist for brute-forcing and discovering hidden things.

ezXSS is an easy way for penetration testers and bug bounty hunters to test (blind) Cross Site Scripting.

Java web and command line applications demonstrating various security topics

nodejs + express security and performance boilerplate.

XSS'OR - Hack with JavaScript.

Extraction of iMessage Data via XSS

Source code for Hacker101.com - a free online web and mobile security class.

Make XSS Great Again

bluemonday: a fast golang HTML sanitizer (inspired by the OWASP Java HTML Sanitizer) to scrub user generated content of XSS

Cure53 Browser Security White Paper

XSSMap 是一款基于 Python3 开发用于检测 XSS 漏洞的工具

Minimalist cheat sheet for developpers to write secure code

Cross-site scripting labs for web application security enthusiasts

Git All the Payloads! A collection of web attack payloads.

Based on native Python module HTMLParser purifier of HTML, To Clear all javascript in html

Vaf is a cross-platform very advanced and fast web fuzzer written in nim

Cross-Site Scripting (XSS) command line tool for testing lists of XSS payloads on web apps.

🖤 网络安全与渗透测试工具导航

XSScope is one of the most powerful and advanced GUI Framework for Modern Browser exploitation via XSS.

rewrite constructor arguments, call DOMPurify, profit

A container repository for my public web hacks!

Automated client-side template injection (sandbox escape/bypass) detection for AngularJS.

Hacking tools

Prevents XSS by figuring out how to escape untrusted values in templates

The Source Code Sniffer is a poor man’s static code analysis tool (SCA) that leverages regular expressions. Designed to highlight high risk functions (Injection, LFI/RFI, file uploads etc) across multiple languages (ASP, Java, CSharp, PHP, Perl, Python, JavaScript, HTML etc) in a highly configurable manner.

👨‍🏫 Mike's Web Security Course

Automatically forward HTTP GET & POST requests to SQLMap's API to test for SQLi and XSS

In progress rough solutions to bWAPP / bee-box

xWAF 3.0 - Free Web Application Firewall, Open-Source.

利用XSS入侵内网(Use XSS automation Invade intranet)

reconFTW is a tool designed to perform automated recon on a target domain by running the best set of tools to perform scanning and finding out vulnerabilities

CloudDefense.ai is an automated web application security testing tool that audits your web applications by checking for vulnerabilities like SQL Injection, Cross-site scripting and other exploitable vulnerabilities.

A collection of tiny XSS Payloads that can be used in different contexts. https://tinyxss.terjanq.me

An exquisite dns&http log server for verify SSRF/XXE/RFI/RCE vulnerability

XSS Payload without Anything.

A python flask app that is purposefully vulnerable to SQL injection and XSS attacks. To be used for demonstrating attacks

Toolset for detecting reflected xss in websites