ezXSS

ezXSS is an open-source XSS (Cross-Site Scripting) testing platform designed to help security researchers identify and collect XSS vulnerabilities. It acts as a payload receiver and logger, storing details about triggered XSS attacks such as the user agent, cookies, DOM, and referrer. This tool is highly useful in bug bounty hunting and penetration testing for monitoring and documenting XSS vectors in real-time.

Features

Logs triggered XSS payloads with detailed context
Captures cookies, user agent, referrer, and DOM data
Custom payload generation with unique identifiers
Email and webhook notifications for triggered payloads
Secure, self-hosted platform with authentication
Dashboard with search and filtering for easy analysis

Project Samples

Project Activity

See All Activity >

License

MIT License

Follow ezXSS

ezXSS Web Site

Other Useful Business Software

$300 Free Credits to Build on Google Cloud

New customers can spin up VMs, build with AI, and query data at no cost.

Put your $300 in credit toward real workloads, then keep building with free monthly usage for 20+ products. No commitment and no charge until you upgrade.

Start Free

Rate This Project

User Reviews

Be the first to post a review of ezXSS!

Additional Project Details

Operating Systems

Linux, Mac, Windows

Programming Language

PHP

Related Categories

PHP Security Software

Registered

2025-05-22

Similar Business Software

Aikido Security

Secure your code, cloud, and runtime in one central system. Aikido’s all-in-one security platform is loved by developers and security teams alike with full security visibility, insight in what matters most, and fast/automatic vulnerability fixes. Teams get security done with Aikido thanks...

See Software
Astra Pentest

Astra’s Pentest is a comprehensive penetration testing solution with an intelligent automated vulnerability scanner coupled with in-depth manual pentesting. On top of 10000+ tests including security checks for all CVEs mentioned in the OWASP top 10, and SANS 25, the automated scanner also...

See Software
Proton Pass

Proton Pass for Business is a secure, end-to-end encrypted password manager built for teams that prioritize privacy, compliance, and control. Safely store and share passwords, passkeys, secure notes, aliases, and credit card details with zero-knowledge encryption, ensuring only your...

See Software
Kitecyber

Kitecyber: Gen AI & Data Security, Built on the Endpoint Kitecyber protects your data and secures Gen AI use with a single lightweight agent that runs directly on the endpoint. Because it lives on the device, Kitecyber sees the complete picture—device posture, operating system activity,...

See Software
Criminal IP

Criminal IP is a cyber threat intelligence solution that provides decision-ready threat intelligence, and attack surface management solutions to security teams worldwide. By continuously scanning the global internet, Criminal IP aggregates and contextualizes threat signals across IPs, domains,...

See Software
Admin By Request Endpoint Privilege Management

Admin By Request EPM gives organizations control over who and what can elevate on their endpoints, without standing up servers, databases, or a dedicated admin team to run it. The model is least privilege: a user or an application receives the specific access its task requires and nothing more....

See Software