Collecting XSS Subreddit Payloads

Having a good collection of Cross-Site Scripting (XSS) payloads is useful when you want to thoroughly test a web site’s ability to defend itself from being exploited. In most cases you can just run any one or more open source and/or commercial scanning tools to test your web site.

XSS cookie stealing - refabr1k's Pentest Notebook

10 Practical scenarios for XSS attacks

Collecting Payloads From CTF PCAPs, by Px Mx

XSS Hunter on

Sensors, Free Full-Text

GitHub - trimstray/the-book-of-secret-knowledge: A collection of inspiring lists, manuals, cheatsheets, blogs, hacks, one-liners, cli/web tools and more.

What is Cross-site Scripting (XSS)? Stored, DOM & Reflected Examples

A Census of Deployed Pulse Connect Secure (PCS) Versions, NCC Group Research Blog

10 Practical scenarios for XSS attacks

OPC UA Deep Dive Series (Part 5): Inside Team82's Research Methodology