Contribute to cybergabby/VulnBank-Exploit-Stored-XSS-Weak-JWT-Signature-Validation-Admin-Access- development by creating an account on GitHub.

A web penetration testing lab documenting manual exploitation of SQL Injection, Reflected XSS, and CSRF flaws. Showcases attack surface mapping and traffic interception using Burp Suite against an ...

0-click XSS (CWE-79) in Mozilla Pocket Android v8.33.0.0 via unsanitized $(document.body).html(content) in articleview-mobile.js. Background service triggers execution without user interaction. Jav...

Professional bug bounty style write-up demonstrating exploitation of a DOM-Based Cross-Site Scripting (XSS) vulnerability via insecure postMessage() handling in the PortSwigger Web Security Academy...

A cybersecurity project analyzing the Samy Worm (MySpace) attack, explaining Stored XSS vulnerabilities, attack methodology, and modern prevention techniques. - Akshaycyber006/XSS-Defense-Bootcamp-...

CVE-2025-0133 Scanner | Palo Alto GlobalProtect XSS Checker | by raditya - radityahack/cve-2025-0133

Contribute to t-simratkaur-svg/xss-poc development by creating an account on GitHub.

XSS discovery pipeline with WAF bypass — chains katana, dalfox, and wafw00f with DOM sink analysis and source map detection. - fexx301/xss-Hunter

Hacker-Man Suite — a browser-based bug bounty toolkit combining real passive recon (DNS, Shodan, subdomain discovery) with vulnerability signal detection (SQLi, XSS, IDOR, SSRF, host header injecti...

A modular Python-based vulnerability scanner that automates network reconnaissance, service fingerprinting, web crawling, and web vulnerability detection, including reflected XSS and HTML injection...

Swagger UI API XSS poc. Contribute to B6G-K1LLER/SwaggerUI-DOMPurify-Bypass development by creating an account on GitHub.

Secure Web Application for Medical Appointments (MedicalApp) built with Java, Jakarta EE, Tomcat, and MySQL. Implements Role-Based Access Control (RBAC) and robust security measures including SSL/T...

Hacker-Man Suite — a browser-based bug bounty toolkit combining real passive recon (DNS, Shodan, subdomain discovery) with vulnerability signal detection (SQLi, XSS, IDOR, SSRF, host header injecti...

Contribute to Layansabha/Dom-xss-ML development by creating an account on GitHub.

Python toolkit for CTF challenges and authorized bug bounty hunting — methodology, payload library, automated testing engine, XSS/IDOR/GraphQL tests - TrueNix/bugbounty-ctf

PoC: CSRF Disabled + Stored XSS + Weak UID in Library QR Code System (CVSS 9.8) - Kimdir01/library-qr-csrf-xss-cve

PoC: Path Traversal File Write + Stored XSS in Uploady File Manager (CVSS 9.0) - Kimdir01/uploady-multi-vuln-cve

A 200+ page research portfolio covering cross-site scripting from browser internals to real-world exploitation, CVE analysis, WAF bypasses, secure coding, and reporting, methodology. - singhparth8...

PHP/MySQL CRUD coursework site, reviewed and rebuilt: fixed broken auth/CSRF/XSS, added a repository layer + PHPUnit tests - BreraDMR/sphynx-cattery-website

Proof of Concept (PoC) for a Cross-Site Scripting (XSS) vulnerability in Swagger UI via maliciously crafted YAML specifications. - hunterxsirago1/swagger-xss-poc