Collecting XSS Subreddit Payloads

Having a good collection of Cross-Site Scripting (XSS) payloads is useful when you want to thoroughly test a web site’s ability to defend itself from being exploited. In most cases you can just run any one or more open source and/or commercial scanning tools to test your web site.

Reddit Hit by Cyberattack that Allowed Hackers to Steal Source Code

Popping Blisters for research: An overview of past payloads and exploring recent developments, NCC Group Research Blog

Weaponizing self-xss - NetSPI

javascript - How does this XSS payloads works for this code? - Stack Overflow

Collecting XSS Subreddit Payloads, by Px Mx

XSS Payload List - Cross Site Scripting Vulnerability Payload List

Collecting XSS Subreddit Payloads, by Px Mx

What is Cross-Site Scripting (XSS) Worm?

Bug Bytes #71 – 20K Facebook XSS, LevelUp 0x06 & Naffy's Notes, PDF, World Wide Web

Do NOT use alert(1) in XSS

r/SpaceX-API, Space

xss payload -confirm``- - Information Security Stack Exchange

A Deeper Look into XSS Payloads : r/netsec

xss-exploitation · GitHub Topics · GitHub

Phillip Maddux