H4ckWeb is a powerful, advanced tool designed for testing web vulnerabilities, including SQL injection and Cross-Site Scripting (XSS). Built with both beginners and advanced users in mind, H4ckWeb allows security professionals and ethical hackers to quickly identify and exploit common web application flaws.

Code to detect Blind XSS vulnerabilities and send notifications to Discord.

XSSInspector can defeat any WAF in the world with its AI and 96 filter set. This open-source solution simplifies XSS vulnerability identification and mitigation, serving as a valuable asset for security experts and developers.

An XSS Exploitation Tool

㊙️ AntiXSS | Protection against Cross-site scripting (XSS) via PHP

✈️ An MVP level Flight Booking System (web-application) based on the Model View Controller (MVC) Architecture made using Java Servlets, Java Server Pages (JSPs). Moreover authentication and authorization for users is implemented. The web-application is also secured against SQL Injection and Cross-Site Scripting attacks.

All-in-One Hacking Tools For Hackers! And more hacking tools! For termux.

ezXSS is an easy way for penetration testers and bug bounty hunters to test (blind) Cross Site Scripting.

Websites Vulnerability Scanner

XSSRocket it is a tool designed for offensive security and XSS (Cross-Site Scripting) attacks.

A tool for collecting information from the site. Scanning "Xss , LFI" bugs, etc. has the ability to "curl" and scan the port.

WAFManis is a Protocol-Level WAF Evasion Fuzzing Tool that automates the discovery of evasion vulnerabilities in Web Application Firewalls (WAFs) by fuzzing HTTP requests to identify potential bypass techniques.

A tool that automatically detects XSS vulnerabilities.

This is only for educational purposes. We won't take responsibility for any kind of damage made using these tools. We recommend using a VPN.

XSS Finder is a Python-based tool designed to identify potential cross-site scripting (XSS) vulnerabilities on websites. It automates the process of scanning web applications for XSS flaws by sending payloads to various input points and analyzing responses. This tool is suitable for security professionals and developers looking to enhance their web

🚀 XSSFUZZ - A tool for detecting XSS vulnerabilities in web applications.

pdf-js-inject，能够将js代码注入到pdf文件中,也可以注入xss-payload到pdf文件中

This tool automates the process of testing for Cross-Site Scripting (XSS) vulnerabilities on websites. It includes features like dynamic payload generation, integration with other Cybersecurity tools, and automated remediation suggestions.

DVWA Setup to Deploy a local k8s cluster using minikube, k3s and demo of the attack vectors.

This website is vulnerable in XSS(Cross-Site Scripting).The user input from the comment section is not validated and sanitized.Due to that, XSS scripts(Javascript codes in usual) can be included in the comments.