1.How to Find XSS: Techniques Security Researchers Use in Real Environmentsresearch | 2026-04-01 16:00 | hackerone.com | Original ↗ | .md | #bug-bounty | #pentesting | #web-security
2.CTF Toolkit: Personal Repository for CTF Challenges, Payloads, and Cheatsheetstool | 2026-03-01 20:48 | github.com | Original ↗ | .md | #open-source | #ctf | #privilege-escalation
3.Web Application Black-Box Testingblog | 2023-07-06 14:07 | yeswehack.com | Original ↗ | .md | #bug-bounty | #pentesting | #fuzzing
4.Exploring JavaScript's exploits: A deep dive into XSS vulnerabilitiesresearch | 2022-12-08 08:25 | yeswehack.com | Original ↗ | .md | #bug-bounty | #web-security | #xss
5.Our favourite community contributions to the XSS cheat sheetresearch | 2022-10-20 08:28 | portswigger.net | Original ↗ | .md | #xss | #community | #payloads
6.Web application firewall bypassblog | 2022-10-11 13:55 | yeswehack.com | Original ↗ | .md | #bug-bounty | #pentesting | #web-security
7.Documenting the impossible: Unexploitable XSS labsresearch | 2020-06-04 09:31 | portswigger.net | Original ↗ | .md | #web-security | #xss | #payloads
8.Adapting AngularJS payloads to exploit real world applicationsresearch | 2019-06-14 12:12 | portswigger.net | Original ↗ | .md | #xss | #template-injection | #payloads
9.Bypassing AV with Veil-Evasionresearch | 2014-07-14 00:00 | netspi.com | Original ↗ | .md | #red-team | #obfuscation | #payloads
10.Sample Burp Suite extension: Intruder payloadsblog | 2012-12-21 15:29 | portswigger.net | Original ↗ | .md | #burp-suite | #fuzzing | #extensions
11.Intruder botoxblog | 2010-03-22 15:33 | portswigger.net | Original ↗ | .md | #burp-suite | #fuzzing | #portswigger