A website that is deliberately vulnerable to XSS attacks

封装HTMLPurifier的富文本过滤器，实现自定义白名单机制。

implement HTMLPurifier into Codeigniter and use it direct from the security class

Stored XSS in InterMind iMind Server through 3.13.65 allows any user to hijack another user's session by sending a malicious file in the chat.

模拟xss攻击

Educational exercise from Wild Code School about XSS attacks prevention.

This module prevents the Most Common XSS and CSRF attacks. The Client includes Secure User Authentication modules such as Login and Signup. The Server validates the User Authentication using Acsess Tokens and Refresh Tokens.

NodeJS bots for challenges

Class to cleanse strings of XSS payloads

Building a secure website using Flask/Python

A payload to modify pages with JavaScript and HTML scripts focusing on XSS vulnerabilities

A collection of security tools for pentersion testing

Google Chrome extension to detect and prevent Reflected XSS via special crafted URLs

Faz a conversão de um payload em caracteres Entidade HTML e pode ser usado para bypass em campos que só aceitam caracteres em uppercase em XSS e HTML Injection

ISC-tema2

An AI-powered web application vulnerability scanner that automates the detection of common security flaws and provides AI-driven insights for impact assessment and remediation suggestions.

Defender Security < 4.1.0 - Protection Bypass (Hidden Login Page)

This web scan will show automated vulnerability.