A comprehensive collection of HTML5-related XSS attack vectors and testing resources for web security professionals.
H5SC (HTML5 Security Cheatsheet) is a security-focused resource that collects and documents HTML5-related cross-site scripting (XSS) attack vectors. It provides security researchers and developers with a comprehensive database of vulnerabilities specific to modern web technologies, along with practical testing files and utilities. The project helps identify security weaknesses in HTML5 implementations and aids in building more secure web applications.
Security researchers, penetration testers, web application security professionals, and developers who need to test and secure HTML5-based applications against XSS attacks.
It offers the most extensive collection of HTML5-specific XSS vectors in an easily searchable format, combined with practical testing resources that aren't available in generic security references. The project is maintained by Cure53, a respected security firm, ensuring quality and relevance.
HTML5 Security Cheatsheet - A collection of HTML5 related XSS attack vectors
Open-Awesome is built by the community, for the community. Submit a project, suggest an awesome list, or help improve the catalog on GitHub.
Hosts a searchable online database at html5sec.org with numerous HTML5-specific XSS attack vectors, regularly updated and curated for modern web technologies.
Provides a wide range of files (e.g., ASF, AVI, CSS, PDF) for testing XSS in various scenarios, making real-world vulnerability assessment easier.
Includes APIs like GET-based search, RSS mode for feed testing, and a JavaScript function to retrieve vectors, enhancing usability for security testing workflows.
Maintained by Cure53, a respected security firm, ensuring the vectors are accurate, relevant, and reflect current HTML5 security threats.
Serves as a reference cheatsheet without automated scanning capabilities, requiring manual effort to apply vectors in security tests, which can be time-consuming.
Focuses exclusively on HTML5-related XSS, omitting other critical web vulnerabilities like CSRF, SQL injection, or server-side issues, limiting its utility for comprehensive security audits.
The README provides basic information but lacks tutorials or detailed guidance, assuming users have prior security knowledge, which can be a barrier for newcomers.