├── .github
└── FUNDING.yml
├── README.md
├── swagger
├── sciprt.js
└── test.yaml
├── xss-all-list.txt
├── xss-by-keyword-filtering.txt
├── xss-encoding-payload.txt
├── xss-for-hidden-input.txt
├── xss-for-input.txt
├── xss-for-markdowns.txt
├── xss-for-onfocus.txt
├── xss-for-title.txt
├── xss-for-username-field.txt
├── xss-for-vuejs.txt
├── xss-href.txt
├── xss-payload-for-input-search.txt
├── xss-polyglot.txt
├── xss-top500-list.txt
├── xss-without-alert-confirm-prompt
└── xss-without-alert.txt
/.github/FUNDING.yml:
--------------------------------------------------------------------------------
1 | # These are supported funding model platforms
2 |
3 | patreon: proviesec
4 |
--------------------------------------------------------------------------------
/README.md:
--------------------------------------------------------------------------------
1 | # xss-payload-list
2 | [](https://opensource.org/licenses/MIT)
3 | [](https://github.com/Proviesec/xss-payload-list/issues)
4 | 
5 |
6 | 
7 |
8 | [](https://twitter.com/proviesec)
9 | 
10 |
11 | # Introduction
12 |
13 | :star: Star us on GitHub — it motivates a lot! :star:
14 |
15 | If you have any XSS payload, just create a PullRequest.
16 |
17 | # Write-Ups / Tutorials
18 | https://portswigger.net/web-security/cross-site-scripting/cheat-sheet
19 | https://medium.com/p/92ac1180e0d0
20 | https://book.hacktricks.xyz/pentesting-web/xss-cross-site-scripting
21 |
22 | # My love polyglot
23 | ```
24 | jaVasCript:/*-->