Collecting XSS Subreddit Payloads

Having a good collection of Cross-Site Scripting (XSS) payloads is useful when you want to thoroughly test a web site’s ability to defend itself from being exploited. In most cases you can just run any one or more open source and/or commercial scanning tools to test your web site.

OPC UA Deep Dive Series (Part 5): Inside Team82's Research Methodology

Defeat Emotet Attacks with Behavior-Based Malware Protection

10 Practical scenarios for XSS attacks

javascript - How does this XSS payloads works for this code? - Stack Overflow

Tesla Awards Researcher $10,000 After Finding XSS Vulnerability - SecurityWeek

How I found a $5,000 Google Maps XSS (by fiddling with Protobuf) : r/programming

Collecting XSS Subreddit Payloads, by Px Mx

Information, Free Full-Text

Reddit Hit by Cyberattack that Allowed Hackers to Steal Source Code

Bypassing Character Limit — XSS Using Spanned Payload : r/InfoSecWriteups

Real Life Examples of Web Vulnerabilities (OWASP Top 10)

Collecting Payloads From CTF PCAPs, by Px Mx

Webhooks

What is Cross-Site Scripting (XSS) Worm?

Git All The Payloads! A Collection Of Web Attack Payloads