Top 23 Xss Open-Source Projects

• hacker101

  11 13,603 7.6 SCSS

  Source code for Hacker101.com - a free online web and mobile security class.

  

Project mention: How to start hacking ? | /r/Hacking_Tutorials | 2023-05-17

• DOMPurify

  42 12,802 8.8 JavaScript

  DOMPurify - a DOM-only, super-fast, uber-tolerant XSS sanitizer for HTML, MathML and SVG. DOMPurify works with a secure default, but offers a lot of configurability and hooks. Demo:

Project mention: JavaScript Libraries for Implementing Trendy Technologies in Web Apps in 2024 | dev.to | 2024-04-09

DOMPurify

• SurveyJS

  surveyjs.io sponsored

  Open-Source JSON Form Builder to Create Dynamic Forms Right in Your App. With SurveyJS form UI libraries, you can build and style forms in a fully-integrated drag & drop form builder, render them in your JS app, and store form submission data in any backend, inc. PHP, ASP.NET Core, and Node.js.

  

• XSStrike

  2 12,690 0.0 Python

  Most advanced XSS scanner.

Project mention: I'm not sure what tool I can even use for my assignment? | /r/tryhackme | 2023-05-31

For XSS: https://github.com/s0md3v/XSStrike

• Resources-for-Beginner-Bug-Bounty-Hunters

  5 10,141 2.9

  A list of resources for those interested in getting started in bug bounties

Project mention: Getting started with bb journey | /r/bugbounty | 2023-06-28

• xss-payload-list

  6 5,613 0.0

  🎯 Cross Site Scripting ( XSS ) Vulnerability Payload List

  

Project mention: XSS example | /r/bugbounty | 2023-06-15

Like an example XSS payload? Go nuts: https://github.com/payloadbox/xss-payload-list

• AwesomeXSS

  2 4,645 2.7 JavaScript

  Awesome XSS stuff

• Web-Security-Learning

  1 4,130 0.0 HTML

  Web-Security-Learning

• WorkOS

  workos.com sponsored

  The modern identity platform for B2B SaaS. The APIs are flexible and easy-to-use, supporting authentication, user identity, and complex enterprise features like SSO and SCIM provisioning.

  

• arachni

  2 3,639 1.5 Ruby

  Web Application Security Scanner Framework

  

Project mention: Self-Host Vulnerability Scanner | /r/selfhosted | 2023-07-09

• payloads

  1 3,519 0.0 Shell

  Git All the Payloads! A collection of web attack payloads. (by foospidy)

• dalfox

  1 3,272 8.4 Go

  🌙🦊 Dalfox is a powerful open-source XSS scanner and utility focused on automation.

• hackerone-reports

  2 3,195 6.3 Python

  Top disclosed reports from HackerOne

• bluemonday

  6 2,977 5.1 Go

  bluemonday: a fast golang HTML sanitizer (inspired by the OWASP Java HTML Sanitizer) to scrub user generated content of XSS

  

• HackVault

  3 1,876 0.0 JavaScript

  A container repository for my public web hacks!

Project mention: What are polyglots and how to use them as a pentester | dev.to | 2023-12-03

• HtmlSanitizer

  3 1,481 8.2 C#

  Cleans HTML to avoid XSS attacks

• Android-Reports-and-Resources

  1 1,351 0.0

  A big list of Android Hackerone disclosed reports and other resources.

• ATSCAN

  1 1,326 2.5 Perl

  Advanced dork Search & Mass Exploit Scanner

• waf-bypass

  5 1,098 7.7 Python

  Check your WAF before an attacker does

  

• Latte

  10 1,061 8.6 PHP

  ☕ Latte: the safest & truly intuitive templates for PHP. Engine for those who want the most secure PHP sites.

  

• xsser

  1 1,060 0.0 Python

  Cross Site "Scripter" (aka XSSer) is an automatic -framework- to detect, exploit and report XSS vulnerabilities in web-based applications.

• noscript

  59 786 7.7 JavaScript

  The popular NoScript Security Suite browser extension.

Project mention: What It's Like to Use Apple's Lockdown Mode | news.ycombinator.com | 2024-01-02

• nuxt-security

  6 700 9.4 TypeScript

  🛡 Automatically configure your app to follow OWASP security patterns and principles by using HTTP Headers and Middleware

Project mention: How Nuxi helps Nuxt deliver great DX? | dev.to | 2024-04-08

The command nuxi module add allows you to skip the second step in the list. So for modules like Nuxt Security right now, you only need to run the first step and nuxi will automatically register the module so that you can get started with the module right away.

• AntiXSS

  1 661 3.8 PHP

  ㊙️ AntiXSS | Protection against Cross-site scripting (XSS) via PHP

Project mention: XSS Attack - Why strip_tags is not enough | dev.to | 2023-09-13

AntiXSS

• Application-Security-Engineer-Interview-Questions

  4 577 0.0

  Some of the questions which i was asked when i was giving interviews for Application/Product Security roles. I am sure this is not an exhaustive list but i felt these questions were important to be asked and some were challenging to answer

• InfluxDB

  www.influxdata.com sponsored

  Power Real-Time Data Analytics at Scale. Get real-time insights from all types of time series data with InfluxDB. Ingest, query, and analyze billions of data points in real-time with unbounded cardinality.

  

Xss related posts

• Lessons from open-source: Use window.trustedTypes to prevent DOM XSS.
  2 projects | dev.to | 8 Apr 2024
• What It's Like to Use Apple's Lockdown Mode
  1 project | news.ycombinator.com | 2 Jan 2024
• How Many Lines of C It Takes to Execute a and B in Python?
  10 projects | news.ycombinator.com | 11 Dec 2023
• Launched my Social Media website for lonely people living abroad, all thanks to NextJS!
  1 project | /r/nextjs | 8 Dec 2023
• Is javascript always bad?
  1 project | /r/TOR | 6 Dec 2023
• The 8-Bit Era: Eight Iconic Processor Designs – By Babbage
  5 projects | news.ycombinator.com | 4 Dec 2023
• XSS Attack - Why strip_tags is not enough
  3 projects | dev.to | 13 Sep 2023
• A note from our sponsor - SurveyJS
  surveyjs.io | 27 Apr 2024

  With SurveyJS form UI libraries, you can build and style forms in a fully-integrated drag & drop form builder, render them in your JS app, and store form submission data in any backend, inc. PHP, ASP.NET Core, and Node.js. Learn more →

Index

Sponsored

Power Real-Time Data Analytics at Scale

Get real-time insights from all types of time series data with InfluxDB. Ingest, query, and analyze billions of data points in real-time with unbounded cardinality.

www.influxdata.com