Collecting XSS Subreddit Payloads

Having a good collection of Cross-Site Scripting (XSS) payloads is useful when you want to thoroughly test a web site’s ability to defend itself from being exploited. In most cases you can just run any one or more open source and/or commercial scanning tools to test your web site.

Real Life Examples of Web Vulnerabilities (OWASP Top 10)

OWASP Juice Shop OWASP Foundation

Webhooks

Getting Started with Payload CMS & Vue JS - DEV Community

Data store

GitHub - trimstray/the-book-of-secret-knowledge: A collection of inspiring lists, manuals, cheatsheets, blogs, hacks, one-liners, cli/web tools and more.

Cross-Site Scripting Exploitation - Hacking Articles

10 Practical scenarios for XSS attacks

GitHub - terjanq/Tiny-XSS-Payloads: A collection of tiny XSS Payloads that can be used in different contexts.

XSS cookie stealing - refabr1k's Pentest Notebook