SafeLine is a self-hosted WAF(Web Application Firewall) / reverse proxy to protect your web apps from attacks and exploits.

security hackers api-gateway captcha firewall waf xss bruteforce self-hosted cybersecurity sql-injection vulnerability application-security web-security cve appsec web-application-firewall http-flood blueteam websecurity

• Updated Nov 11, 2026
• Go

DOMPurify - a DOM-only, super-fast, uber-tolerant XSS sanitizer for HTML, MathML and SVG. DOMPurify works with a secure default, but offers a lot of configurability and hooks. Demo:

javascript svg html security dom xss mathml sanitizer dompurify cross-site-scripting prevent-xss-attacks

• Updated Nov 11, 2026
• JavaScript

Most advanced XSS scanner.

xss xss-scanner xss-detection xss-exploit xss-bruteforce xss-python xsstrike waf-detection

• Updated Apr 26, 2025
• Python

Source code for Hacker101.com - a free online web and mobile security class.

education security hacking xss sql-injection vulnerability csrf web-security mobile-security clickjacking hackerone session-fixation hacker101 unchecked-redirects

• Updated Feb 22, 2025
• SCSS

A list of resources for those interested in getting started in bug bounties

education hackers hacking xss bug-bounty web-security bugbounty pentest ssrf bug-bounty-hunters learn2hack

• Updated Jul 23, 2024

一款长亭自研的完善的安全评估工具，支持常见 web 安全问题扫描和自定义 poc | 使用之前务必先阅读文档

security xss poc vulnerability passive-vulnerability-scanner sqlinjection vulnerability-scanner

• Updated Oct 29, 2024
• Vue

Top disclosed reports from HackerOne

security xss rce reports sql-injection csrf writeups bugbounty ssrf hackerone xxe idor

• Updated Nov 7, 2026
• Python

[灯灯]微服务中后台快速开发平台，支持jdk21、jdk17、jdk8，专注于多租户、开放平台解决方案，亦可作为普通项目（非SaaS架构）的基础开发框架使用，目前已实现插拔式数据库隔离、SCHEMA隔离、字段隔离 等租户隔离方案。

java jwt admin cloud spring spring-cloud gateway xss springboot mybatis zuul hystrix eureka springcloud nacos seata

• Updated Oct 9, 2026
• Java

🌙🦊 Dalfox is a powerful open-source XSS scanner and utility focused on automation.

rust security xss bugbounty xss-scanner hacktoberfest devsecops bugbounty-tool

• Updated Nov 11, 2026
• Rust

Awesome XSS stuff

xss xss-detection payload xss-payloads payload-list xss-cheatsheet

• Updated Oct 30, 2024
• JavaScript

Web-Security-Learning

security xss sqlinjection

• Updated Oct 2, 2021
• HTML

Web Application Security Scanner Framework

javascript ruby crawler security-audit modular hack dom analysis scanner detection hacking xss audit web-application penetration-testing sql-injection vulnerability-detection arachni scanners

• Updated Apr 22, 2026
• Ruby

Git All the Payloads! A collection of web attack payloads.

hacking xss cybersecurity sqli passwords pentest appsec payload payloads web-attack-payloads

• Updated May 15, 2023
• Shell

bluemonday: a fast golang HTML sanitizer (inspired by the OWASP Java HTML Sanitizer) to scrub user generated content of XSS

go html golang sanitization security xss owasp allowlist

• Updated Apr 4, 2025
• Go

A collection of tiny XSS Payloads that can be used in different contexts. https://tinyxss.terjanq.me

javascript html xss ctf bugbounty payloads

• Updated Nov 29, 2024
• JavaScript

ezXSS is an easy way for penetration testers and bug bounty hunters to test (blind) Cross Site Scripting.

php alert blind test bug xss penetration-testing xss-vulnerability easy-to-use easy bugbounty xss-scanner xss-exploitation xss-detection payload xss-attacks xss-injection blind-xss redteaming redteam

• Updated Nov 5, 2026
• PHP

🐈Medusa是一个红队武器库平台，目前包括XSS平台、协同平台、CVE监控、免杀生成、DNSLOG、钓鱼邮件、文件获取等功能，持续开发中

mail virus email xss poc medusa cve metasploit-framework payload exp dnslog cobaltstrike readteam

• Updated Mar 3, 2024
• Python

XSS'OR - Hack with JavaScript.

encoding hack xss probe csrf pentest hacking-tool pentest-tool

• Updated Dec 12, 2021
• JavaScript

Collection of quality safety articles. Awesome articles.

github java dns security list awesome cloud research web hacking waf xss bug-bounty src pentest hacker fuzz sec redteam bounty-hunters

• Updated Sep 26, 2024

A container repository for my public web hacks!

tracking exploit regex xss fuzzing web-security pentesting payloads reconnaissance

• Updated Oct 12, 2022
• JavaScript