🎯 Cross Site Scripting ( XSS ) Vulnerability Payload List

• UpdatedJul 18, 2024

ezXSS is an easy way for penetration testers and bug bounty hunters to test (blind) Cross Site Scripting.

• UpdatedDec 14, 2025
• PHP

XssPayload List . Usage:

• UpdatedJan 15, 2020
• Python

A tool to embed XXE and XSS payloads in docx, odt, pptx, xlsx files (oxml_xxe on steroids)

• UpdatedJan 28, 2024
• Python

Xss Payload Generator ~ Xss Scanner ~ Xss Dork Finder

• UpdatedJul 25, 2023
• Python

From XSS to RCE 2.75 - Black Hat Europe Arsenal 2017 + Extras

• UpdatedFeb 18, 2020
• Python

Solutions and write-ups from security-based competitions also known as Capture The Flag competition

• UpdatedSep 21, 2020
• HTML

NLP model and tech for cyber security tasks

• UpdatedMar 22, 2023
• Jupyter Notebook

Automated XSS Finder

• UpdatedAug 7, 2013
• Python

DorkEye is a Python script for ethical dorking. The goal is to identify unintentionally exposed resources, such as sensitive files, login panels or indexed directories.

• UpdatedJul 15, 2025
• Python

Foxss is a simple php based penetration Testing Tool.Currently it will help to find XSS vulnerability in websites.

• UpdatedOct 31, 2018
• JavaScript

The largest hacking program with new tools CVE-2023-PoC for the year 2023 It contains all the attack and exploitation tools for testing websites, as well as a graphical interface to facilitate its use for beginners

• UpdatedFeb 5, 2024
• Python

Scrippy is a browser extension that holds sql statements (think clip board) to aid devlopers in the testing of websites for basic code injections.

• UpdatedAug 21, 2022
• JavaScript

All Labs of the Security for Developers Training

• UpdatedFeb 10, 2023
• Shell

Cross-site scripting labs for web application security enthusiasts

• UpdatedApr 29, 2020
• CSS

An ongoing curated collection of awesome XSS software, libraries, frameworks, learning tutorials & practical resources cross-site scripting.

• UpdatedFeb 2, 2022

An XSS reverse shell to control any website remotely using web sockets, along with an HTTP server to capture data

• UpdatedJan 19, 2023
• JavaScript

A tool that automatically detects XSS vulnerabilities.

• UpdatedSep 20, 2024
• Python

This is a repo of my solution of one XSS challenge website (http://sudo.co.il/xss/) . This challenges may have different types of solutions. My solutions are not the only one. So, keep searching & keep sharing.

• UpdatedAug 20, 2023

Some vulnerables docker webapps

• UpdatedJul 2, 2024
• PHP