2 dépôts
Techniques for injecting XSS payloads by escaping JavaScript strings, backticks, or code blocks.
Distinct from XSS Injection: Distinct from XSS Injection: focuses specifically on injection within JavaScript context rather than general XSS vectors.
Explore 2 awesome GitHub repositories matching part of an awesome list · JavaScript Context XSS Payloads. Refine with filters or upvote what's useful.
AllAboutBugBounty is a curated collection of bug bounty techniques and payloads for web application security testing. It serves as a reference resource covering common web vulnerabilities and exploitation methods for security researchers, providing a structured approach to identifying and exploiting web application security flaws in bug bounty programs. The repository covers a wide range of attack categories including authentication bypass, cross-site scripting injection, server-side request forgery, web cache poisoning, and business logic abuse. It includes techniques for bypassing access co
Documents XSS injection techniques specifically for JavaScript context, including string and code block escaping.
Modlishka is a man-in-the-middle reverse proxy framework designed for automated phishing campaigns. It dynamically generates valid TLS certificates for target domains, aggregates traffic from multiple domains through a single proxy, and injects custom scripts into proxied responses. The framework operates transparently without requiring client-side certificate installation and relays two-factor authentication steps to capture secondary verification tokens. What sets Modlishka apart is its ability to automate the entire credential theft process. It logs all form submissions, headers, and cooki
Injects custom JavaScript payloads into proxied web pages using pattern-based matching rules.