19 results for “topic:dom-xss”
Open Redirection Analyzer
OWASP Xenotix XSS Exploit Framework is an advanced Cross Site Scripting (XSS) vulnerability detection and exploitation framework.
Safe replacement for the v-html directive
XSSB is a proactive DOM sanitizer, defending against client-side injection attacks!
MIT license BRS-XSS is a modular Python CLI scanner for XSS vulnerabilities. Features context-aware payloads, WAF evasion, DOM analysis via Playwright, ML-based risk scoring, and export in HTML/JSON/SARIF. Designed for integration with Brabus Recon Suite (BRS).
Find sources and sinks in js code that could lead to DOM XSS 🔎💧🚰
DOM-based XSS where location.search is written into the page via innerHTML, letting us inject HTML and trigger alert(1) using an SVG onload payload.
DOM-based XSS flaw where location.search is injected into the page via innerHTML, letting us execute arbitrary JavaScript.
DOM XSS in jQuery anchor href attribute sink using location.search source
Discovering the JavaScript parameters for dom-xss
URDev’s Ultimate Injection Template is my personal payload collection: a comprehensive reference collection of web injection vectors, focused primarily on client-side execution surfaces in modern and legacy web applications.
A chrome extension to detect DOM changes and reflections to find XSS
Ultimate DOM Clobbering Cheat Sheet - 100+ exploitation vectors for XSS, CSP bypass, and client-side attacks. Covers browser compatibility, framework evasion, and real-world exploit chains for security researchers and bug bounty hunters
An extension to find possible parameters in a web page DOM
Advanced Cross-Site Scripting (XSS) vulnerability testing framework with WAF bypass, DOM XSS detection, and comprehensive reporting capabilities.
The 29th PoC Hacking Camp - Web Hacking CTF wargame
BRS-KB is XSS Knowledge Base API
This is a script to exploit DOM XSS in jQuery anchor href attribute sink using location.search source in the PortSwigger Web Security Lab.
📦 Redirect Android app storage paths safely with easy APK and Zygisk module installs for real devices and emulators.