Static and dynamic JavaScript analyzer for detecting DOM-based XSS sources and dangerous sinks in web applications. - legacy-so/domxss_hunter

A collection of notes and scripts on web application vulnerabilities, created while learning ethical hacking and practicing on legal labs like PortSwigger. This is part of my personal journey into ...

A practical XSS lab covering Reflected, Stored, and DOM-based Cross-Site Scripting vulnerabilities, with multiple beginner-friendly scenarios to help learners understand and practice different XSS ...

Pentesting DVWA across SQLi, XSS, Command Injection, File Inclusion, File Upload, Brute Force, and CSRF — Low to High difficulty - Mahhyya/DVWA-Web-App-Pentesting

Contribute to Kyzerz53/Cross-Site-Scripting-XSS- development by creating an account on GitHub.

Manual web app penetration test of OWASP Juice Shop using Burp Suite — SQL injection, IDOR, DOM XSS, and access control findings with full writeups. - rijen-maharjan/owasp-juice-shop-security-asses...

Individual web security coursework: SQL injection, DOM XSS, CSRF and CORS analysis with technical reflections. - askmma/web-security-labs

XSSAM is a professional XSS Reconnaissance & Validation framework for authorized bug-bounty testing. Featuring an async crawler, JS endpoint mining, and context-aware mutations, it uses Pla...

Automated recon & vulnerability discovery suite for authorized security testing. Five scanners — SQLi, XSS, SSRF, Open Redirect, Path Traversal — with 896 payload templates, OOB callback co...

Contribute to TBWLE22/DOM-XSS-in-Swagger-UI development by creating an account on GitHub.

Interactive Web Elements application built with HTML, CSS, and Vanilla JavaScript demonstrating DOM manipulation, state management, and XSS safety - areejamirkhan050-max/DecodeLabs-Project3

A powerful, XSS scanner written in Go. XSS-Dragon automates the full reflective-XSS discovery workflow: reflection probing, encoding analysis, context detection, context-specific payload injectio...

Recherches sur les mutated xss au sein du sanitizer de symphony - kibatche/Dom-Explorer-Spaghetti-Edition

Undergraduate Seminar — DOM XSS & Trusted Types + ML Classification Pipeline - TheCodeNotTakenT-T/seminar-implementation

Python XSS scanner with real browser confirmation, tested against Google's XSS Game, DVWA, and OWASP Juice Shop - SashankBista/XSS-scanner

2nd-year CS undergrad | learning pentesting & web appsec | PortSwigger Academy picoCTF TryHackMe | Python C C++ | building XSS labs - S4i1M/whoami

ESLint security rules for template bindings, written once for JSX, Astro, Vue, Svelte and HTML: unsafe HTML sinks, script breakout, javascript: URLs, mixed content, SRI, iframe sandbox escapes and ...