Collecting XSS Subreddit Payloads

Having a good collection of Cross-Site Scripting (XSS) payloads is useful when you want to thoroughly test a web site’s ability to defend itself from being exploited. In most cases you can just run any one or more open source and/or commercial scanning tools to test your web site.

Phillip Maddux

Bypassing Character Limit — XSS Using Spanned Payload : r/InfoSecWriteups

Stored XSS vulnerability in image alt attribute to steal cookies (Bug Bounty) - Cybr

What is a Cross-Site Scripting (XSS) attack: Definition & Examples

Using Payload CMS to build a blog - LogRocket Blog

A Census of Deployed Pulse Connect Secure (PCS) Versions, NCC Group Research Blog

Researchers Discover Numerous Samples of Information Stealer 'Stealc' in the Wild

Collecting Payloads From CTF PCAPs

10 Practical scenarios for XSS attacks

A Detailed Guide to Cross-Site Scripting (XSS)

OWASP Juice Shop OWASP Foundation