DOMPurify - a DOM-only, super-fast, uber-tolerant XSS sanitizer for HTML, MathML and SVG. DOMPurify works with a secure default, but offers a lot of configurability and hooks. Demo:
w3af: web application attack and audit framework, the open source web vulnerability scanner.
An XSS exploitation command-line interface and payload generator.
Tips on how to write exploit scripts (faster!)
Build Content-Security-Policy headers from a JSON file (or build them programmatically)
Blind XSS Scanner is a tool that can be used to scan for blind XSS vulnerabilities in web applications.
Egyscan The Best web vulnerability scanner; it's a multifaceted security powerhouse designed to fortify your web applications against malicious threats. Let's delve into the tasks and functions that make Egyscan an indispensable tool in your security arsenal:
Helios: Automated XSS Testing
xss-payload-list
Dockerized PHP lab with XSS (cross-site scripting) challenges and filter-bypass examples for practising web exploitation.
phpMyAdmin XSS
Toolset for detecting reflected xss in websites
FrogPost: postMessage Security Testing Tool
XsSCan | Web Application XSS Scanner | Coded By Sir.4m1R [Mr.Hidden]
NLP model and tech for cyber security tasks
Cross-Site Scripting (XSS) injects malicious scripts into trusted websites via user input. Attacker-sent scripts run in users' browsers, accessing sensitive data, cookies, and even altering HTML content. Widespread due to input validation lapses.
Simple machine learning based web application firewall (WAF) created in python
xss vulnerability scanner and input fuzzing tool.
JSSCM detects expired domains for Stored XSS exploitation during browsing.
To associate your repository with the cross-site-scripting topic, visit your repo's landing page and select "manage topics."