Projects sharing features with Domxsswiki

Some public notes

HTML5 Security Cheatsheet - A collection of HTML5 related XSS attack vectors

SecLists is a centralized library of security assessment data designed to support vulnerability discovery and penetration testing. It functions as a comprehensive repository of wordlists, payloads, and testing methodologies used to audit software, firmware, and internet-connected hardware for technical vulnerabilities. The project distinguishes itself through a standardized taxonomy and a language-agnostic data format, which allows security tools to predictably ingest and utilize its assets regardless of the underlying programming environment. By decoupling raw testing data from execution log

A comprehensive curated list of available Bug Bounty & Disclosure Programs and Write-ups.

This project is a bug bounty resource directory, vulnerability research cheatsheet, and web security payload library. It serves as a centralized collection of curated payloads and common attack vectors used to identify security vulnerabilities in web applications. The repository provides a directory of platforms, books, and tools to support vulnerability discovery skills. It includes a reference for tested payloads and techniques used to trigger bugs and identify vulnerabilities during security audits. The content covers web application pentesting, security vulnerability testing, and general

some codes and notes about the backdoor listening on TCP-32764 in linksys WAG200G.

PHP Security Advisories Database

This repository contains several tools Project Zero uses to test iPhone messaging. It includes:

Dalfox is an automated web application security tool specifically designed for discovering and verifying cross-site scripting vulnerabilities. It functions as an XSS vulnerability scanner that analyzes HTTP parameters and DOM structures to identify reflected, stored, and blind injection points. The project distinguishes itself by providing a Model Context Protocol server and a REST API, allowing artificial intelligence agents and remote interfaces to trigger and manage security scans programmatically. It utilizes a payload mutation engine and fingerprinting strategies to execute WAF evasion t

A XSS mind map ;)

Browser's XSS Filter Bypass Cheat Sheet

📡 PoC auto collect from GitHub. ⚠️ Be careful Malware.

Vulnerability Intelligence Platform

PeiQi-WIKI-Book is a cybersecurity knowledge base and security research wiki. It functions as a markdown static site generator that converts structured text files into a set of interconnected HTML pages. This system serves as a curated collection of technical documentation and guides focused on vulnerability research, code auditing, and penetration testing. The project utilizes a git-driven documentation workflow, using version control hooks to automatically update a live website when content changes. It features a client-side searchable index that allows users to find security topics without

Burp Suite extension that mutates ciphers to bypass TLS-fingerprint based bot detection

Modern CLI for exploring vulnerability data with powerful search, filtering, and analysis capabilities.

🤝 Show your support - give a ⭐️ if you liked the content | SHARE on Twitter | Follow me on

This repository is intended to host my research papers. Put it on watch if you would like to read more from me.

Network Infrastructure Penetration Testing Tool

The iOS Mobile Backup Xtractor. It extracts backups... and stuff.

Pay me if you like this paper:)