XSS Test Helper A small Python CLI for authorized security testing. It checks whether URL query parameter values are reflected in an HTTP responses using unique inert markers, and provides manual p...

Web2 lab 2: deliberately vulnerable app (stored XSS, sensitive data exposure) with on/off switches - RomanoRandic/web2-security

Self-hosted Blind XSS testing dashboard with unlimited payload markers, callback logging, page grouping, Discord alerts, import/export, and Render deployment support. - Bugatsec/Blind-XSSTrace

CLI Based Reflected XSS and SQLi Scanner. Contribute to pr0lificz/Venom development by creating an account on GitHub.

Stored XSS (CWE-79) in modified eCommerce 3.3.0 via admin/countries.php. RedScan Research Team advisory. - domcabral9/modified-shop-3.3.0-stored-xss-admin-countries

Command-line tool for basic web security checks: common-port scanning, simple SQL-injection and reflected-XSS detection. - muazzambadshah/web-vulnerability-scanner

Contribute to R00T-0X0/dom-xss-prevention development by creating an account on GitHub.

Python-based XSS payload injection & CSRF token analysis scripts + documented PoC for Week 4 of the Automated Web Application Security Assessment internship project. - Robert-ux-dev/Financi...

Contribute to Omar-Ahmed23777/UneeQ-XSS-Task development by creating an account on GitHub.

Web Vulnerability Scanner — safe GET-only checks for reflected XSS, error-based SQLi, headers, cookies, CORS and open redirects, with HTML/JSON reports. Authorized testing only. GPL-3.0. - tahiryou...

Security Research Toolkit and HackSkills Knowledge Base - Authorized Penetration Testing, Bug Bounty, Web/API Security - 123caiji/security-research-toolkit

BDD test automation suite for an e-commerce store: Java, Cucumber, Selenium and Rest Assured. 49 API and UI scenarios run in CI against the real app in Docker, and 11 more reproduce 10 bugs I found...

XSS detection model and CSRF/clickjacking scanner. Contribute to hareramray/websec-toolkit development by creating an account on GitHub.

Webmin 2.670 - High 8.0 - Remote - Stored XSS - anonymous mail; detach.cgi serves unclosed script as text/html - abraxas/webmin-detach-xss

Unofficial security backports for PrestaShop 1.7.8.11 (EOL). CVE-2026-44212, unauthenticated stored XSS to back-office takeover. Not affiliated with PrestaShop SA. - fstivicic/prestashop17-security...

Switch 2 research: ns2jb × CivSwitch — escalate the Civ 7 XSS to the full fs-sysmodule chain on fw 23.0.1 (host-agnostic engine, civshim bridge, shell, captive-portal WebKit rig) - Dviros/BarbarismJB

Contribute to harshparashar639-lang/browzer-xss-poc development by creating an account on GitHub.

Authorized web application penetration testing lab covering IDOR, JWT security, Stored XSS, and insecure file upload leading to RCE. - uchesmartz/FAMJIS-Bank-Penetration-Testing

A modular, persistent security scanner designed for authorized web application auditing, combining asynchronous HTTP reflection analysis with dynamic browser DOM verification. - gl1tch0x1/xoxss

XSS 靶场（DVWA 中文定制）+ 反射型 XSS 检测器 | Chinese-localized DVWA lab + reflective XSS detector - plattsbrozena604-boop/xss-lab-toolkit