xss
Tracked open-source repos tagged xss, sorted by stars.
Related topics
Topics that frequently appear alongside xss on the same repo.
Recent risers
Repos created in the last 90 days, tagged xss.
No new repos tagged with this topic in the last 90 days.
- #1
SafeLine is a self-hosted WAF(Web Application Firewall) / reverse proxy to protect your web apps from attacks and exploits.
★ 22,480+15Star change over the last 7 days - #2
DOMPurify - a DOM-only, super-fast, uber-tolerant XSS sanitizer for HTML, MathML and SVG. DOMPurify works with a secure default, but offers a lot of configurability and hooks. Demo:
★ 17,353+7Star change over the last 7 days - #3★ 15,166+6Star change over the last 7 days
- #4★ 14,525+5Star change over the last 7 days
- #5
A list of resources for those interested in getting started in bug bounties
★ 12,218+12Star change over the last 7 days - #6★ 11,728+5Star change over the last 7 days
- #7
Top disclosed reports from HackerOne
★ 6,508+11Star change over the last 7 days - #8
[灯灯]微服务中后台快速开发平台，支持jdk21、jdk17、jdk8，专注于多租户、开放平台解决方案，亦可作为普通项目（非SaaS架构）的基础开发框架使用，目前已实现插拔式数据库隔离、SCHEMA隔离、字段隔离 等租户隔离方案。
★ 5,752+2Star change over the last 7 days - #9★ 5,269+7Star change over the last 7 days
- #10
Awesome XSS stuff
★ 5,142+1Star change over the last 7 days - #11
bluemonday: a fast golang HTML sanitizer (inspired by the OWASP Java HTML Sanitizer) to scrub user generated content of XSS
★ 3,717+2Star change over the last 7 days - #12
A collection of tiny XSS Payloads that can be used in different contexts. https://tinyxss.terjanq.me
★ 2,387+1Star change over the last 7 days - #13
ezXSS is an easy way for penetration testers and bug bounty hunters to test (blind) Cross Site Scripting.
★ 2,333+2Star change over the last 7 days - #14★ 2,235+0Star change over the last 7 days
- #15
Collection of quality safety articles. Awesome articles.
★ 2,116+0Star change over the last 7 days - #16
A Python based web application scanner to gather OSINT and fuzz for OWASP vulnerabilities on a target website.
★ 1,820-1Star change over the last 7 days - #17
A big list of Android Hackerone disclosed reports and other resources.
★ 1,710+2Star change over the last 7 days - #18
Industry-leading free, high-performance, AI and semantic technology Web Application Firewall and API Security Gateway (WAAP) - UUSEC WAF.
★ 1,708+4Star change over the last 7 days - #19
Cleans HTML to avoid XSS attacks
★ 1,707+0Star change over the last 7 days - #20★ 1,585+1Star change over the last 7 days
- #21
Check your WAF before an attacker does
★ 1,522+1Star change over the last 7 days - #22
Burp Suite Certified Practitioner Exam Study
★ 1,465+2Star change over the last 7 days - #23
Cross Site "Scripter" (aka XSSer) is an automatic -framework- to detect, exploit and report XSS vulnerabilities in web-based applications.
★ 1,461-1Star change over the last 7 days - #24★ 1,440-1Star change over the last 7 days
- #25
☕ Latte: the safest & truly intuitive templates for PHP. Engine for those who want the most secure PHP sites.
★ 1,291+0Star change over the last 7 days - #26
This repository holds all the list of advanced XSS payloads that can be used in penetration testing. These payloads can be loaded into XSS scanners as well.
★ 1,141+0Star change over the last 7 days - #27★ 1,139+0Star change over the last 7 days
- #28
Lonkero - Wraps around your attack surface. Professional-grade scanner for real penetration testing. Fast. Modular. Rust.
★ 1,074+26Star change over the last 7 days - #29
🛡 Automatically configure your app to follow OWASP security patterns and principles by using HTTP Headers and Middleware
★ 979+0Star change over the last 7 days - #30★ 737+1Star change over the last 7 days
