ezXSS is an easy way for penetration testers and bug bounty hunters to test (blind) Cross Site Scripting.

☕ Latte: the intuitive and fast template engine for those who want the most secure PHP sites.

Build Content-Security-Policy headers from a JSON file (or build them programmatically)

㊙️ AntiXSS | Protection against Cross-site scripting (XSS) via PHP

Demo of a Vue.js app that mixes both clientside templates and serverside templates leading to an XSS vulnerability

利用XSS入侵内网(Use XSS automation Invade intranet)

OWASP Vulnerable Web Application Project https://github.com/hummingbirdscyber

Cross-site scripting labs for web application security enthusiasts

A jQuery augmented PHP library for creating secure HTML forms, and validating them easily

xWAF 3.0 - Free Web Application Firewall, Open-Source.

Make XSS Great Again

A tool for the persistent XSS exploitation with a focus for mobile web browsers

Lightweight In-App Web Application Firewall for PHP

The objective of this class is offer an automatic system of protection for developers's projects and simplify some security operations as the check of CSRF or XSS all in a simple class. Infact you could just call the main method to have better security yet without too much complicated operations.

Filter user input for XSS but don't touch other html

A Deliberately Insecure Web Application

XSS HTTP Inject0r is a proof of concept tool that shows how XSS (Cross Site Scripting) flags can be exploited easily. It is written in HTML + Javascript + PHP and released under GPLv3.

A simple web application to learn about Cross-Site Scripting (XSS)

Exploiting stored XSS vulnerability to hijack sessions

Defending against XSS in SVG files

A PHP script to run on your server to grab cookies through xss

pwnig all the (web)things

A Simple JS and PHP Botnet

🔒 HTTP Headers for Wordpress

Demo for Exploiting CORS Misconfiguration using XSS

A lightweight php-based HTML tag and attribute whitelist filter.

AntiXSS for Twig

WebHook for Red Team

This is a set of class which can secure the application against XSS and SQL Injection

使用docker-compose一键快速搭建ezXSS环境