• Earn real money by being active: Hello Guest, earn real money by simply being active on the forum — post quality content, get reactions, and help the community. Once you reach the minimum credit amount, you’ll be able to withdraw your balance directly. Learn how it works.

xss

  1. itsMe

    Phyton XSS Automation Tool

    This tool is designed to help hackers identify and exploit cross-site scripting (XSS) vulnerabilities in web applications. XSS vulnerabilities occur when an application includes user-supplied data in its responses without properly sanitizing it, allowing an attacker to inject malicious code into...
  2. itsMe

    Phyton XSS Exploit Scanner

    xssexp Cross-Site-Scripting (XSS) Automatic Scanner Description This tool is designed to test for xss vulnerabilities in web sites, it uses a list of payloads to inject into parameters and check to see if they get reflected back. Hidden content
  3. itsMe

    Toxssin - An XSS Exploitation Command-Line Interface And Payload Generator

    Purpose toxssin is an open-source penetration testing tool that automates the process of exploiting Cross-Site Scripting (XSS) vulnerabilities. It consists of an https server that works as an interpreter for the traffic generated by the malicious JavaScript payload that powers this tool...
  4. LSDeep

    XSS Payloads List 200+

    Hidden content Hidden content
  5. LSDeep

    XSS to RCE (dompdf 0day)

    Hidden content
  6. itsMe

    dalfox v2.6.1 - Parameter Analysis and XSS Scanning tool

    What is DalFox Just, XSS Scanning and Parameter Analysis tool. I previously developed XSpear, a Ruby-based XSS tool, and this time, a full change occurred during the process of porting with golang!!! and created it as a new project. The basic concept is to analyze parameters, find XSS, and...
  7. itsMe

    xsstools: xss development frameworks

    xsstools xsstools is an xss development framework, with the goal of making payload writing easier. Exfiltrators A collection of exfiltrators is available     message: use postMessage     get: use fetch GET     post: use fetch POST urlencoded     postJSON: use fetch POST json encoded    ...
  8. itsMe

    XSS CookieStealer

    Simple php & js code to steal cookies from a persistent XSS. Hidden content
  9. F B I

    XSS Method

    Hidden content
  10. itsMe

    XSSTRON: Find XSS Vulnerabilities Automatically

    XSSTRON Electron JS Browser To Find XSS Vulnerabilities Powerful Chromium Browser to find XSS Vulnerabilities automatically while browsing the web, it can detect many case scenarios with support for POST requests too. Hidden content
  11. itsMe

    JSshell v2.9 - JavaScript reverse shell for exploiting XSS remotely or finding blind XSS

    JSshell – a JavaScript reverse shell. This using to exploit XSS remotely, help to find blind XSS, … This tool works for both Unix and Windows operating system and it can be running with both Python 2 and Python 3. This is a big update of JShell – a tool to get a JavaScript shell with XSS by...
  12. itsMe

    PwnXSS: powerful XSS scanner

    PwnXSS A powerful XSS scanner made in python 3.7. Main features     crawling all links on a website ( crawler engine )     POST and GET forms are supported     many settings that can be customized     Advanced error handling     Multiprocessing support.✔️     ETC… Hidden content
  13. itsMe

    CheckXSS - Detect XSS vulnerability in Web Applications

    Features     Support url encoding bypass     Support unicode encoding of HTML tag attribute value to bypass     Support HTML encoding to bypass the HTML tag attribute value     Support for flexible replacement of () '"to bypass     Case bypass Hidden content
  14. itsMe

    FinDOM-XSS - A Fast DOM Based XSS Vulnerability Scanner With Simplicity

    FinDOM-XSS is a tool that allows you to finding for possible and/ potential DOM based XSS vulnerability in a fast manner. Hidden content
  15. itsMe

    findom-xss: fast DOM based XSS vulnerability scanner

    FinDOM-XSS FinDOM-XSS is a tool that allows you to find possible and/ potential DOM-based XSS vulnerability in a fast manner. Hidden content
  16. itsMe

    XSS-Freak - xss scanner

    XSS-Freak XSS-Freak is an XSS scanner fully written in python3 from scratch. It is one of its kind since it crawls the website for all possible links and directories to expand its attack scope. Then it searches them for input tags and then launches a bunch of XSS payloads. if an input is not...
  17. dEEpEst

    How to easily find Reflected XSS vulnerabilities!

    How to easily find Reflected XSS vulnerabilities! [SIZE= 18px]Hidden content
  18. itsMe

    NoXss - A xss scanner

    NoXss NoXss is a xss scanner, include reflected xss and dom-based xss.It can scan a single url or many urls from text file,also support to scan traffic from burpsuite.It has found some xss vulnerabilities in Bug Bounty program. Features     Multi-process     Async request(use gevent)    ...
  19. 0x1

    Tools HackBar V2

    Firefox Extension of HackBar without license A HackBar for new firefox (Firefox Quantum). This addon is written in webextension and alternatives to the XUL version of original Hackbar. How to use Press F12 to open hackbar Feature Load, split, execute url from address bar...
  20. 0x1

    JSONBee

    A ready to use JSONP endpoints to help bypass content security policy of different websites. The tool was presented during HackIT 2018 in Kiev. The presentation can be found Here Hidden content What is JSONBee ? The main idea behind this tool is to find the JSONP endpoint(s) that would...
Back
Top