SQLGuardJS is Express request verification for SQL injection, XSS, and NoSQL injection with heuristic detection, schema checks, structured logging, and a secure router API. - Chiranth-Janardhan-mog...

DEDJS is a context-aware JavaScript static analysis tool designed for bug bounty and pentesting. It reduces false positives by correlating user-controlled sources with dangerous sinks, enabling acc...

Evaluación Unidad 3 MONGODB. transformada en un CRM B2B funcional para Momentum Space. Arquitectura MERN con diseño corporativo. Implementa modelos relacionales NoSQL (1:N), agregaciones avanzadas ...

Web application penetration test of OWASP Juice Shop using Burp Suite — covering SQL injection, XSS, and IDOR vulnerabilities. - AyeshaKhan-Enigma/juice-shop-pentest

Stateless anonymous global chat built with Laravel 13, Reverb WebSockets, Redis, MySQL, Tailwind CSS, and Vanilla JS. Features real-time messaging, emoji reactions, rate limiting, XSS protection, p...

Flask web security lab demonstrating CSRF and DOM-based XSS vulnerabilities, exploitation demos, and mitigation techniques. - Chanindhu/flask-web-security-lab

Research and analysis of Cross-Site Scripting vulnerabilities including Stored, Reflected, and DOM-Based XSS attacks. - Rae-kapar/XSS-Vulnerability-Research

XSS 跨站脚本攻击学习笔记 - PortSwigger Academy 实战记录 (Kali + Burp Suite) - Scott214278/xss-learning-notes

A deliberately vulnerable FinTech web application for web application penetration testing practice. - Cookies307/fintech-vuln-app

Writeups from PortSwigger Web Security Academy labs exploiting UNION-based SQL injection (Oracle) and DOM-based XSS via document.write, with root cause analysis and fixes. - marz-w/sql-injection-xs...

Pure-functional, signal-based SDK for embeddable widgets that mount safely into any page — no framework required. Fine-grained reactivity, XSS-safe templates, Shadow DOM isolation. Zero dependencie...

Contribute to meeque/xss-demo-app development by creating an account on GitHub.

FastAPI & CLI Document Insight Pipeline powered by Groq Llama-3 and Scikit-Learn TF-IDF. Features layout-aware text chunking, section summaries, and context-grounded QA. Styled with an anim...

Burp Suite pentest portfolio on OWASP Juice Shop. Demonstrates manual exploitation of OWASP Top 10 flaws including SQL Injection (Admin account takeover), Brute Force via Intruder, Session Hijackin...

Contribute to Thilakesh/Blind-XSS development by creating an account on GitHub.

Contribute to mazen-elbaz/dom-xss-scanner development by creating an account on GitHub.

vex is an AI-driven security suite designed for rapid vulnerability discovery. From SQLi and XSS to complex IDOR and broken access control flaws, vex leverages smart crawling and adaptive payload g...

🛡️ دليل شامل للـ Web Penetration Testing والـ Bug Bounty | 21 درس بالعربي والإنجليزي | نظري + صور توضيحية + تطبيق عملي - abdallahakram20/web-pentest-bug-bounty-guide

Contribute to coolnn/dom-based-xss-lab development by creating an account on GitHub.

📦 Application web sécurisée de gestion de stock orientée Merchandising. Projet réalisé après 2 mois de formation. Focus sur la robustesse du code et la protection contre les failles XSS (sans frame...