A web security project focused on identifying and mitigating Cross-Site Scripting (XSS) vulnerabilities using secure coding practices, input validation, output encoding, and safe DOM manipulation. ...

Hands-on web security lab demonstrating Reflected, Stored & DOM-Based XSS, CSP protection, vulnerabilities, and mitigation techniques using PHP, JavaScript & CSS. - emmanuellawoniow...

XSSRecon automates the process of testing URL parameters for reflection of a test payload rix4uni and further checks how special characters are handled (allowed, blocked, or converted). - rix4uni/x...

Contribute to orfloresti/devtalks-xss development by creating an account on GitHub.

Blind XSS detection built on interact.sh — per-field tokenized payloads, injection-point↔vulnerable-URL correlation, screenshot/DOM capture, and a persistent-session reverse proxy. Authorized testi...

0-click XSS (CWE-79) in Mozilla Pocket Android v8.33.0.0 via unsanitized $(document.body).html(content) in articleview-mobile.js. Background service triggers execution without user interaction. Jav...

xss2shell poc and detector. Contribute to Christbowel/xss2shell development by creating an account on GitHub.

Prove an injected web payload actually EXECUTES (alert(1) fires), not just reflects (a shared XSS-execution oracle over Santh's jsdet sandbox). - santhreal/detonate

Interactive cybersecurity demo playground built for OWASP JISU SIP Program — CyberStart 2026, covering DevTools, Phishing, SQL Injection, XSS & Password Hashing with a live quiz and leaderb...

Contribute to Daddypool-44418/xss-learning-log development by creating an account on GitHub.

A production-grade, zero-trust security library for Node.js & TypeScript. Defends against OWASP Top 10, Prototype Pollution, XSS, SQLi, and Path Traversal with WebAuthn, AES-256-GCM, Adapti...

Hands-on XSS attack & defense research on OWASP Juice Shop, PortSwigger & self-authored labs (Burp Suite + DevTools). - calsgnkadir/xss-attack-defense-lab

A threat actor may inject malicious content into webapp. The payload is not reflected in the HTTP request and response, then executed in the victim's browser - qeeqbox/dom-based-cross-site...

Contribute to uells/dom-xss-lab development by creating an account on GitHub.

Manual web application penetration testing of OWASP Juice Shop using Burp Suite Community Edition. Identified and validated SQL Injection, XSS, Broken Access Control, Sensitive Data Exposure, and B...

Advanced XSS detection suite with context-aware payload generation, custom HTML/JS parsing, intelligent fuzzing, fast crawling, and DOM/reflected XSS scanning. Includes WAF detection/evasion, param...

下一代上下文感知 XSS 扫描器 — 19种注入上下文、反射/存储/DOM/Blind XSS检测、WAF绕过、CSP分析、自动化报告 - wqnmlgb151/XSSscan

A lightweight Chrome Extension for discovering potential DOM XSS vulnerabilities directly in your browser. - indra-031/Behelit

Zero-dependency strip-to-text HTML sanitizer with contextual output encoding for Node.js, browsers, and edge runtimes. - moji2002/purifai

WRAITH — a modern browser-hooking framework (BeEF + blind-XSS successor) for red teams, researchers, and educators. For authorized security testing, research & education only. - Arcanum-Sec/wraith