BDD test automation suite for an e-commerce store: Java, Cucumber, Selenium and Rest Assured. 49 API and UI scenarios run in CI against the real app in Docker, and 11 more reproduce 10 bugs I found...

XSS detection model and CSRF/clickjacking scanner. Contribute to hareramray/websec-toolkit development by creating an account on GitHub.

Webmin 2.670 - High 8.0 - Remote - Stored XSS - anonymous mail; detach.cgi serves unclosed script as text/html - abraxas/webmin-detach-xss

Unofficial security backports for PrestaShop 1.7.8.11 (EOL). CVE-2026-44212, unauthenticated stored XSS to back-office takeover. Not affiliated with PrestaShop SA. - fstivicic/prestashop17-security...

Authorized web application penetration testing lab covering IDOR, JWT security, Stored XSS, and insecure file upload leading to RCE. - uchesmartz/FAMJIS-Bank-Penetration-Testing

Contribute to GGQQmax/XSS development by creating an account on GitHub.

W tym repozytorium znajduje się prezentacja oraz zadania dla grupy na temat podatności XSS. - michalpatola/XSS-projekt

How publishing an OCI artifact turns a routine pull into SSRF, stored XSS, DoS, and more — companion research for DEF CON 34's "No Socket, No Privs, No Problem." - gouldni...

Flask app with vulnerable and fixed modes: SQLi, XSS, CSRF, SSRF, IDOR. 43 exploit tests. - braylo-ai/owasp-vuln-vs-fixed

Writeups for SEED Labs web attack labs: SQL injection, CSRF and XSS against Elgg and a PHP/MySQL app, with payloads and screenshots. - Khushbu-H-Patel/seedlabs-web-attack-writeups

Contribute to Joelndege/Cross-Site-Scripting-XSS-Testing development by creating an account on GitHub.

Lab PoC: WordPress Interactivity API data-wp-bind--href stored XSS (Author -> Administrator) escalated to command execution via the plugin editor. - shoo0lin/wp-interactivity-xss

Contribute to DynamicConstructor/xss-rendering-security-lab development by creating an account on GitHub.

Network security and penetration testing lab portfolio: Nmap, SQLi, XSS, ARP/DNS spoofing, Snort IDS, Windows Firewall hardening and a hand-built TLS VPN. - abdul-wahid022/network-security-and-expl...

WordPress Plugin MP3 Audio Player by Sonaar <= 5.14 - Stored XSS to Admin Account Creation - HexxedBitHeadz/cve-2026-111967

Contribute to Josephkim0703/xss-awareness-lab development by creating an account on GitHub.

Hands-on Cross-Site Scripting (XSS) research and PortSwigger Web Security Academy lab writeups, covering reflected, stored, and DOM-based XSS, exploitation techniques, payload analysis, and mitigat...

Easily create and share Proof of Concepts in HTML, JavaScript, etc. with custom headers, all via query parameters - JorianWoltjer/responder

Modular PHP request firewall: SQLi/XSS/traversal detection, AbuseIPDB.com and .ru reputation, rate limiting, severity-based IP blocks, incident journal, admin dashboard. - paulmann/PHP-Shield

HTTP request payload inspector for SQLi, XSS, SSTI, and path traversal - Logihertz-Systems-OPC-Pvt-Ltd/lh-payload-guard