Topics / #xss

Xss projects on GitHub

Cross-site scripting attack tools, payloads, and sanitization libraries for web security.

As of , the most-starred Xss projects on GitHub are SafeLine (22.8K stars), DOMPurify (17.5K stars) and XSStrike (15.2K stars). GitHub.Locker tracks 8 Xss repositories with 118K stars combined. The fastest-growing on October 17 was SafeLine, with +4 stars in a day.

8Projects
118KStars in total
+16Stars in a day
Browse in the catalog →github.com/topics/xss ↗

Hot right now

Most stars gained in a day · Oct 17

+4

SafeLine

chaitin/SafeLine · ★ 22.8K

SafeLine is a self-hosted web application firewall (WAF) and reverse proxy that protects your web apps from attacks and exploits by filtering and monitoring HTTP traffic.

+3

DOMPurify

cure53/DOMPurify · ★ 17.5K

DOMPurify is an XSS sanitizer for HTML, MathML and SVG: you feed it a string of dirty HTML and it returns clean HTML with everything dangerous stripped out, preventing XSS attacks.

+3

XSStrike

s0md3v/XSStrike · ★ 15.2K

XSStrike is a Cross Site Scripting (XSS) detection suite built around four hand-written parsers, an intelligent payload generator, a fuzzing engine, and a fast crawler. Instead of just firing generic payloads like most scanners, it analyzes the live response and crafts payloads guaranteed to work through context analysis.

+3

hacker101

Hacker0x01/hacker101 · ★ 14.6K

Hacker101 is a free online class for web and mobile security from HackerOne (the Hacker0x01 org), aimed at everyone from programmers curious about bug bounties to seasoned security professionals.

The all-time top

8 projects · by stars

  1. #1 · chaitin/SafeLine

    SafeLine

    SafeLine is a self-hosted web application firewall (WAF) and reverse proxy that protects your web apps from attacks and exploits by filtering and monitoring HTTP traffic.

    22.8K
  2. #2 · cure53/DOMPurify

    DOMPurify

    DOMPurify is an XSS sanitizer for HTML, MathML and SVG: you feed it a string of dirty HTML and it returns clean HTML with everything dangerous stripped out, preventing XSS attacks.

    17.5K
  3. #3 · s0md3v/XSStrike

    XSStrike

    XSStrike is a Cross Site Scripting (XSS) detection suite built around four hand-written parsers, an intelligent payload generator, a fuzzing engine, and a fast crawler. Instead of just firing generic payloads like most scanners, it analyzes the live response and crafts payloads guaranteed to work through context analysis.

    15.2K
  1. 4

    hacker101

    14.6KHacker0x01/hacker101 · SCSS

    Hacker101 is a free online class for web and mobile security from HackerOne (the Hacker0x01 org), aimed at everyone from programmers curious about bug bounties to seasoned security professionals.

  2. 5

    Resources-for-Beginner-Bug-Bounty-Hunters

    12.3Knahamsec/Resources-for-Beginner-Bug-Bounty-Hunters

    A curated collection of resources for people getting started with web hacking and bug bounty hunting, including blog posts, talks, books, tools, labs and vulnerability-type guides.

  3. 6

    synapse

    12.1Kmatrix-org/synapse · Python

    Synapse is an open-source Matrix homeserver written in Python/Twisted - server software that lets you run your own chat server on the decentralized, federated Matrix network, with support for encryption and VoIP.

  4. 7

    jinja

    11.8Kpallets/jinja · Python

    Jinja is a fast, expressive, extensible template engine for Python: you write placeholders in a template using Python-like syntax, then pass it data to render a final document such as HTML.

  5. 8

    xray

    11.8Kchaitin/xray · Vue

    xray is a security assessment tool built by Chaitin for scanning common web vulnerabilities and running custom PoCs against targets.

Often tagged together