All projects
16 repositories · updated 2026-11-07
Loading…
1chaitin / SafeLineSafeLine is a self-hosted WAF(Web Application Firewall) / reverse proxy to protect your web apps from attacks and exploits.GoGPL-3.0 · Share derivative sourceInsufficient rank history23,180
2cure53 / DOMPurifyDOMPurify - a DOM-only, super-fast, uber-tolerant XSS sanitizer for HTML, MathML and SVG. DOMPurify works with a secure default, but offers a lot of configurability and hooks. Demo:JavaScriptApache-2.0 · PermissiveInsufficient rank history17,508
3s0md3v / XSStrikeAn XSS vulnerability scanner.PythonGPL-3.0 · Share derivative sourceInactiveInsufficient rank history15,244
4Hacker0x01 / hacker101Source code for Hacker101.com - a free online web and mobile security class.SCSSLicense not declaredInactiveInsufficient rank history14,629
5nahamsec / Resources-for-Beginner-Bug-Bounty-HuntersA list of resources for those interested in getting started in bug bountiesLicense not declaredInactiveInsufficient rank history12,323
6chaitin / xrayA comprehensive security assessment tool self-developed by Changting, which supports scanning of common web security issues and customized POC | Be sure to read the documentation before using itVueLicense not declaredInactiveInsufficient rank history11,785
7reddelexc / hackerone-reportsTop disclosed reports from HackerOnePythonLicense not declaredInsufficient rank history6,655
8dromara / lamp-cloud[Dengdeng] Microservice mid- and back-end rapid development platform supports jdk21, jdk17, and jdk8. It focuses on multi-tenant and open platform solutions. It can also be used as a basic development framework for ordinary projects (non-SaaS architecture). Currently, it has implemented pluggable database isolation, SCHEMA isolation, field isolation and other tenant isolation solutions.JavaApache-2.0 · PermissiveInsufficient rank history5,763
9hahwul / dalfox🌙🦊 Dalfox is a powerful open-source XSS scanner and utility focused on automation.RustMIT · PermissiveInsufficient rank history5,356
10s0md3v / AwesomeXSSAwesome XSS stuffJavaScriptMIT · PermissiveInactiveInsufficient rank history5,158
11CHYbeta / Web-Security-LearningA directory of Web-security learning resources, organizing reference articles and tool links on SQL injection, XSS, access control, code auditing, and related topics.HTMLLicense not declaredInactiveInsufficient rank history4,308
12foospidy / payloadsGit All the Payloads! A collection of web attack payloads.ShellGPL-3.0 · Share derivative sourceInactiveInsufficient rank history4,005
13microcosm-cc / bluemondaybluemonday: a fast golang HTML sanitizer (inspired by the OWASP Java HTML Sanitizer) to scrub user generated content of XSSGoBSD-3-Clause · PermissiveInactiveInsufficient rank history3,730
14bountyyfi / lonkeroLonkero - Wraps around your attack surface. Professional-grade scanner for real penetration testing. Fast. Modular. Rust.RustLicense not declaredInsufficient rank history1,099
15tijme / angularjs-csti-scannerAutomated client-side template injection (sandbox escape/bypass) detection for AngularJS v1.x.PythonMIT · PermissiveInactiveInsufficient rank history324
16v8blink / Chromium-based-XSS-Taint-TrackingCyclops is a browser with XSS detection capabilitiesGPL-3.0 · Share derivative sourceInactiveInsufficient rank history127
