Lucene search
+L

115 matches found

Kitploit
Kitploit
added 2026/09/14 5:22 a.m.10 views

XSS-Catcher

XSS Catcher A blind XSS detection and XSS data capture framework that runs on Flask, VueJS and PostgreSQL. XSS Catcher is an intuitive tool that automates blind Cross-Site Scripting XSS attacks and data gathering, including screenshots. It features a user-friendly payload generator for creating...

5.9AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/14 5:17 a.m.10 views

ezXSS

ezXSS is an easy way for penetration testers and bug bounty hunters to test blind Cross Site Scripting. ezXSS is a tool that is designed to help find and exploit cross-site scripting XSS vulnerabilities. One of the key features of ezXSS is its ability to identify and exploit blind XSS...

5.7AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/14 3:41 a.m.5 views

JSshell

JSshell - version 3.1 JSshell - a JavaScript reverse shell. This is used for executing JS code remotely, exploiting blind XSS, ... Requirements: Any OS + Python 2 or Python 3 New in JSshell version 3.1 Updated in the new version of JShell 3.1: New JSshell command: snippet - allows to write a...

6AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/14 1:35 a.m.10 views

B-XSSRF

B-XSSRF Toolkit to detect and keep track on Blind XSS, XXE & SSRF SETUP...

5.9AI score
SaveExploits0References2
Kitploit
Kitploit
added 2026/09/13 6:53 p.m.8 views

bxss

Bxss - Escáner de XSS Ciego 🚀 Descripción...

5.9AI score
SaveExploits0References4
Kitploit
Kitploit
added 2026/09/13 6:53 p.m.116 views

bxss

Bxss - Blind XSS Scanner 🚀 Description...

5.3AI score
SaveExploits0References4
Kitploit
Kitploit
added 2026/09/13 2:31 p.m.4 views

femida

Femida-xss(开发中) 一款用于 Burp Suite 的自动化盲 XSS 搜索插件。 安装 Git clone https://github.com/wish-i-was/femida.git Burp - Extender - Add - 找到并选择 blind-xss.py 使用方法 设置 首先,你需要在“Your url”字段中设置回调查询 URL,然后按 Enter 键自动将其保存到 config.py 文件中。 设置完成后,你需要在 Payloads 表格中填充 OOB-XSS 向量,这样插件就能将你的 payload 注入到发出的请求中。请注意,你需要在 paylo...

5.4AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/13 2:31 p.m.109 views

femida

Femida-xss WIP An automated blind-xss search plugin for Burp Suite. Installation Git clone https://github.com/wish-i-was/femida.git Burp - Extender - Add - find and select blind-xss.py How to use Settings First of all you need to setup your callback URL in field called "Your url" and press Enter ...

5.5AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/13 1:39 p.m.7 views

CVE-2019-13633

CVE-2019-13633 Suggested description : Blinger.io v.1.0.2519 is vulnerable to Blind/Persistent XSS. Additional Information : Blinger.io - is a platform which used by global clients such as FxPro, Alfa Bank, OneTwoTrip, Ivi, KupiVIP Group, Belavia, Wargaming, Yandex, OZON, TCS Group Holding and...

6.1CVSS6.5AI score0.00966EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/09/12 8:27 p.m.8 views

xsshunter-express

XSS Hunter Express Se configura en 5 minutos y no requiere mantenimiento La forma más rápida de configurar XSS Hunter para probar y encontrar vulnerabilidades de cross-site scripting ciego. Configuración Cinco minutos, intenta no saltarte demasiado Requisitos docker y docker-compose instalados Ho...

5.9AI score
SaveExploits0References3
Kitploit
Kitploit
added 2026/09/12 5:26 p.m.6 views

CVE-2025-50363_BXSS_CVE

Project Name & Repo URL: Maid Hiring Management System using PHP and MySQL Vulnerability Type: Privilege Escalation via Blind XSS Affected Versions:v1.0 💣Vulnerability Description: A Blind Cross-Site Scripting XSS vulnerability was discovered in the Maid Hiring Management System, which allows a...

5.4CVSS5.7AI score0.00234EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/11 10:13 a.m.8 views

Blind-XSS-Manager

Blind-XSS-Manager Never forget where you inject. Description A Chrome extension that keeps track of the injected URL with Blind XSS payloads. It adds a unique value for each payload assigned to the URL and recorded by the extension when it gets coppied. The payloads are almost the same as the...

5.9AI score
SaveExploits0References2
Kitploit
Kitploit
added 2026/09/11 7:53 a.m.10 views

CVE-2025-11262-Lab

CVE-2025-11262 - Link Whisper Free Unauthenticated Stored Blind XSS Executive Summary This repository contains a local Docker lab for reproducing CVE-2025-11262 , an unauthenticated stored cross-site scripting issue affecting the WordPress plugin Link Whisper Free. The lab compares two plugin...

7.2CVSS5.8AI score0.00242EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/11 4:42 a.m.7 views

XSpear

XSpear XSpear is XSS Scanner on ruby gems !IMPORTANT XSpear Repository Archived This repository has been archived and is now read-only. XSpear is no longer actively maintained. Try Dalfox instead 🌙🦊 A faster, more powerful XSS scanner with advanced features. → https://github.com/hahwul/dalfox Key...

6.1AI score
SaveExploits0References5
Kitploit
Kitploit
added 2026/09/08 7:50 p.m.8 views

Automated-blind-xss-search-for-Burp-Suite

Femida-xss WIP Un plugin automatizado de búsqueda de blind-xss para Burp Suite. Instalación Git clone https://github.com/ianxtianxt/Automated-blind-xss-search-for-Burp-Suite.git Burp - Extender - Add - busca y selecciona blind-xss.py Cómo usar Configuración En primer lugar, debes configurar tu UR...

5.9AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/08 5:48 a.m.7 views

wraith

WRAITH — browser hook framework A modern, standalone browser-hooking framework for red teams, security researchers, and educators — a clean-room successor to BeEF and the blind-XSS callback tools we live in. FOR AUTHORIZED SECURITY TESTING, RESEARCH & EDUCATION ONLY. WRAITH is an offensive-securi...

5.9AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/07 12:28 p.m.10 views

XSSFire

XSSFire A standalone Blind XSS Script. How it works: The script is a combination between PHP and JavaScript, it captures the data using JS and send it to the script itself, then it generates report files and deliver them through telegram. Requirements: 1. Web Server running on Linux with a domain...

6AI score
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2026/04/02 5:37 p.m.5 views

CVE-2026-34598 YesWiki has Persistant Blind XSS at "/?BazaR&vue=consulter"

YesWiki is a wiki system written in PHP. Prior to version 4.6.0, a stored and blind XSS vulnerability exists in the form title field. A malicious attacker can inject JavaScript without any authentication via a form title that is saved in the backend database. When any user visits that injected...

7.1CVSS5.8AI score0.00213EPSS
SaveExploits1References2
Cvelist
Cvelist
added 2026/04/02 5:37 p.m.44 views

CVE-2026-34598 YesWiki has Persistant Blind XSS at "/?BazaR&vue=consulter"

YesWiki is a wiki system written in PHP. Prior to version 4.6.0, a stored and blind XSS vulnerability exists in the form title field. A malicious attacker can inject JavaScript without any authentication via a form title that is saved in the backend database. When any user visits that injected...

7.1CVSS0.00213EPSS
SaveExploits1References2
ATTACKERKB
ATTACKERKB
added 2026/04/01 9:21 p.m.3 views

CVE-2026-34560

CI4MS is a CodeIgniter 4-based CMS skeleton that delivers a production-ready, modular architecture with RBAC authorization and theme support. Prior to version 0.31.0.0, the application renders user-controlled input unsafely within the logs interface. If any stored XSS payload exists within logged...

9.1CVSS5.8AI score0.0038EPSS
SaveExploits1References3Affected Software1
Rows per page
Query Builder