dalfox

Looking for the Go v2.x version? Dalfox v3 is a complete rewrite in Rust. The Go codebase is preserved on the v2 branch and continues to receive security backports. See SECURITY.md for the support policy, and the migration guide for what changed in v3. Dalfox is a powerful open-source tool that...

brash

Brash Chromium Browser DoS Attack via document.title Exploitation Brash is a critical vulnerability in Blink , the rendering engine that powers Google's Chromium-based browsers. It allows any Chromium browser to collapse in 15-60 seconds by exploiting an architectural flaw in how certain DOM...

htcap

HTCAP htcap is a web application scanner able to crawl single page application SPA recursively by intercepting ajax calls and DOM changes. KEY FEATURES Recursive DOM crawling engine Discovers ajax/fetch/jsonp/websocket requests Supports cookies, proxy, custom headers, http auth and more Heuristic...

PoC-CVE-2024-24035

CVE-2024-24035 Title The SIL 3.1 is vulnerable to Cross Site Scripting XSS in the "hmessage" parameter. Date: 2024-01-14 Author: Elizeu Das Dores Vendor Homepage: https://www.setorinformatica.com/ Version: 3.1 POC CVE-2024-24035 The "hmessage" parameter is vulnerable to DOM Based Cross Site...

CVE-2021-24891-Simulation

A hands-on, containerized lab environment to simulate and exploit a DOM-based Cross-Site Scripting XSS vulnerability in the Elementor Website Builder WordPress plugin, identified as CVE-2021-24891. 📖 About The Vulnerability This lab demonstrates a DOM-based Cross-Site Scripting XSS vulnerability ...

CVE-2025-64495-POC

CVE-2025-64495-POC Open WebUI vulnerable to Stored DOM XSS via prompts when 'Insert Prompt as Rich Text' is enabled resulting in ATO/RCE Summary The functionality that inserts custom prompts into the chat window is vulnerable to DOM XSS when 'Insert Prompt as Rich Text' is enabled, since the prom...

xsssniper

XSSSNIPER xsssniper is an handy xss discovery tool with mass scanning functionalities. Usage: root@kitploit: Usage: xsssniper.py options Options: -h, --help show this help message and exit -u URL, --url=URL target URL --post try a post request to target url --data=POSTDATA post data to use...

Next.js-RSC-RCE-Scanner-Burp-Suite-Extension

Next.js RSC RCE Scanner Burp Suite Extension A high-fidelity Burp Suite extension to detect the Next.js / React Server Components RSC Remote Code Execution vulnerability CVE-2025-55182 & CVE-2025-66478. This extension implements the detection logic discovered by the Searchlight Cyber Security...

Hoppscotch <= 2026.2.1 - Open Redirect

Hoppscotch = 2026.2.1 is vulnerable to a DOM-based open redirect on the /enter page. The redirect query parameter is passed directly to windowz location.href with no origin validation. Requires one additional query parameter to trigger. Exploited via a crafted URL such as...

Mailcow Dockerized Swagger UI - Cross-Site Scripting

Mailcow-dockerized before 2022-09a uses a vulnerable version of Swagger UI before 4.11.1 that is affected by a DOM-based Cross-Site Scripting XSS vulnerability. When a user accesses the Swagger documentation with a crafted configUrl or url parameter containing JavaScript payloads, arbitrary code...

CVE-2020-13889

Author: Andre k Lorenci Contact: [email protected] CVE-2020-13889 Hello, this vulnerability consists in a function called showAlert in the administration panel of bludit,that when accessed in DOM, allows users define the text to be popped up in the message box. But this function dont have an...

CVE-2026-43735

CVE-2026-43735 WebKit cross-origin information leak. Safari = 26.5.2: PATCHED NavigateEvent.sourceElement is null Principle When the parent page uses to trigger a fragment navigation of a cross-origin iframe, the NavigateEvent.sourceElement received by the iframe is the element of the parent page...

AwesomeXSS

AwesomeXSS This repository is a collection of Awesome XSS resources. Contributions are welcome and should be submitted via an issue. Awesome contents Challenges Reads & Presentations Tools Mind maps DOM XSS Payloads Polyglots Tags and event handlers Context breaking HTML context Attribute context...

fix-react2shell-next

fix-react2shell-next Un comando para corregir CVE-2025-66478 React 2 Shell RCE en tu aplicación Next.js / React RSC. root@kitploit: npx fix-react2shell-next Incrementos de versión deterministas según los avisos oficiales. Qué hace 1. Escanea recursivamente todos los archivos package.json admite...

JSFScan.sh

JSFScan.sh El blog se puede encontrar en https://medium.com/@patelkathan22/beginners-guide-on-how-you-can-use-javascript-in-bugbounty-492f6eb1f9ea?sk=21500dc4288281c7e6ed2315943269e7 Script creado para toda tu automatización de reconocimiento de JavaScript en bug bounty. Simplemente pasa la lista...

electronegativity

Electronegativity ⚠️ Ya no mantenemos activamente este proyecto ⚠️ ¿Qué es Electronegativity? Electronegativity es una herramienta para identificar configuraciones incorrectas y anti-patrones de seguridad en aplicaciones basadas en Electron. Aprovecha el análisis de AST y DOM para buscar...

electronegativity

Electronegativity ⚠️ We're no longer actively maintaining this project ⚠️ What's Electronegativity? Electronegativity is a tool to identify misconfigurations and security anti-patterns in Electron-based applications. It leverages AST and DOM parsing to look for security-relevant configurations, as...

CVE-2025-55182

React2Shell Vulnerability - CVE-2025-55182 📓 Introduction This vulnerability, known as React2Shell, was discovered in December 2025 and affects components of next.js with CVSS 10.0. With a simple POST request, it's possible to obtain an critical unauthenticated RCE. Below are the versions affecte...

WordPress Elementor Website Builder <3.1.4 - Cross-Site Scripting

WordPress Elementor Website Builder plugin before 3.1.4 contains a DOM cross-site scripting vulnerability. It does not sanitize or escape user input appended to the DOM via a malicious hash. id: CVE-2021-24891 info: name: WordPress Elementor Website Builder 3.1.4 - Cross-Site Scripting author:...

Yonyou U8 13.0 - Cross-Site Scripting

Yonyou U8 13.0 contains a DOM-based cross-site scripting vulnerability via the component /u8sl/WebHelp. An attacker can inject arbitrary script in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to steal cookie-based authentication credentials...