Web Application Security Scanner Framework
🔱 Powerfull XSS Scanning and Parameter analysis tool&gem
Black Hat Ruby book | Lab files | Buy the book https://www.amazon.com/dp/B08JHSF6GT
Tests URLs for Local File Inclusion (LFI), Remote File Inclusion (RFI), SQL injection (SQLi), and Cross Site Scripting (XSS), Server Side Template Injection (SSTI), and Open Redirects.
An API for escaping different kind of queries
Hacker101 is a free class for web security. Whether you're a programmer with an interest in bug bounties or a seasoned security professional, Hacker101 has something to teach you.
Generate a post exploit script to download an arbitrary file using HTML5's Blob object (https://developer.mozilla.org/en-US/docs/Web/API/Blob)
A project to filter SQL Injection and XSS attacks using ANN -- in Ruby
This Jekyll plugin generates a content-security-policy HTML meta tag for your static site based on images, styles, scripts, frames and more found within each static page. Also converts style attributes to style tags and generates SHA256 hashes for them.
xspear is a xss vulnerability scanner made in ruby
Dependency-free pure Ruby HTML parser with selectors, sanitization, and article extraction.
Automated web vulnerability scanner in pure Ruby: crawls a target, poisons every parameter, and confirms SSTI, SQLi, XSS, LFI, command injection, SSRF, XXE and more by diffing against each parameter's own baseline.
Lint or sanitize untrusted SVG in pure Ruby, catch scripts, XSS, XXE, external references, and render bombs before you render or embed it
Fast Rack middleware for SQLi/XSS detection powered by libinjection
📦 Flags .html_safe/raw(...) wrapping a value traceable to params[...] with no sanitization first - the classic Rails XSS footgun that defeats default auto-escaping.
To associate your repository with the xss topic, visit your repo's landing page and select "manage topics."