xss-exploitation

ezXSS is an easy way for penetration testers and bug bounty hunters to test (blind) Cross Site Scripting.

An XSS exploitation command-line interface and payload generator.

Wordpress Attack Suite

JSshell - JavaScript reverse/remote shell

OWASP Xenotix XSS Exploit Framework is an advanced Cross Site Scripting (XSS) vulnerability detection and exploitation framework.

A scanner/exploitation tool written in GO, which leverages client-side Prototype Pollution to XSS by exploiting known gadgets.

From XSS to RCE 2.75 - Black Hat Europe Arsenal 2017 + Extras

Cross-site scripting labs for web application security enthusiasts

An XSS reverse shell framework

Find XSS payloads that actually work by filtering them based on real-world constraints instead of blind payload spraying.

XSSMap 是一款基于 Python3 开发用于检测 XSS 漏洞的工具

OWASP PTK - application security browser extension.

Shadow Workers is a free and open source C2 and proxy designed for penetration testers to help in the exploitation of XSS and malicious Service Workers (SW)

Collection of XSS Payloads for fun and profit

Session Hijacking Visual Exploitation

A list of useful payloads and Bypass for Web Application Security and Bug Bounty/CTF

XSSRocket it is a tool designed for offensive security and XSS (Cross-Site Scripting) attacks.

Collect XSS vulnerable parameters from entire domain.

Dockerized PHP lab with XSS (cross-site scripting) challenges and filter-bypass examples for practising web exploitation.

Make XSS Great Again