README.md

Awesome-XSS

实时更新，欢迎Star

书籍

• XSS 跨站脚本攻击剖析与防御
• Web前端黑客技术揭秘
• XSS Cheat Sheet By Brute Logic

网站

• brutelogic.com.br
• respectxss.blogspot.in
• xss-payloads

靶场

• Google's XSS Challenge
• prompt(1) to win
• alert(1) to win
• XSS Game
• Cure XSS
• kcal.pw
• ZDResearch XSS challenge
• Gareth's Hackvertor XSS Challenges
• Soroush Dallili's XSS Challenge series
• XSS Challenge by Krzysztof Kotowicz
• Blacklist WAF Bypass Challenge 1
• Blacklist WAF Bypass Challenge 2
• avlidienbrunn XSS challenge 1
• avlidienbrunn XSS challenge 2
• Cure53 Easter Challenge '13
• [Cure53 Cookie Challenge](Cure53 Cookie Challenge)
• Cure53 Xmas Challenge 2010
• Mario's XSSMe Challenge
• Roman's crazy hard XSS Challenge Number 1
• Roman's crazy hard XSS Challenge Number 2
• mala's jQuery-related XSS challenge
• XSSMas Challenge
• XSS Challenge
• Cure53 Singapore-Training Challenge
• pagebox
• JSLR
• DomXss

大牛

• Rodolfo Assis
• Ashar Javed
• Somdev Sangwan because I made this repo :3

深度好文（分个类？）

• XSS in Sarahah
• Bypass Any WAF for XSS
• XSS in Facebook via PNG Content Type
• How I met your girlfriend
• How to Find 1,352 Wordpress XSS Plugin Vulnerabilities in one hour
• Blind XSS
• Copy Pest

工具

• XSStrike
• KNOXSS
• BeEF
• JShell