Skip to content

ezXSS is an easy way for penetration testers and bug bounty hunters to test (blind) Cross Site Scripting.

active 2025-03-132026-07-08 (UTC)

Partial coverage11,455 / 12,452 hourly files (92%) · 2 absent upstream · 994 failed, retryable2025-03-102026-08-10 (UTC)— sampled evenly across the window, so rankings and trends hold; absolute counts scale up.
Events
245
Pushes
35
Pull requests
3
Issues
18
Stars
130
Forks
24

Activity over time

Daily event counts in the loaded window

Line chart, 483 days from 2025-03-13 to 2026-07-08. Pushes: 35 total, peak 6 in a day. Pull requests: 3 total, peak 2 in a day. Issues: 18 total, peak 2 in a day. Comments: 28 total, peak 12 in a day. Stars: 130 total, peak 5 in a day.

  • Pushes
  • Pull requests
  • Issues
  • Comments
  • Stars

Stars, PRs, issues and forks are under-captured in the later part of this window. GH Archive progressively stopped capturing non-push events during 2026 — −95% or worse by the end of the window. Every series here except Pushes fades for that reason, so a decline above reflects the archive, not this repository. Pushes stay reliable throughout, so read them, and the contributor counts derived from them, as the real signal. Data health has the measurements.

Top contributors

Pushes, PRs, issues, reviews and comments — stars and forks excluded, so this is contribution rather than popularity

ContributorContributionsPushesPRsComments
ssl5229215
soshunte10009
Haones4011
marcelo3213001
github-actions[bot]3300
BoBeR1822001
geeknik2000
nvroot1000
notakodr1000
Copilot1100
lc1001
lattepanda205-dev1000
vaadata-brzuszekm11000

Recent activity

Latest issues, pull requests and releases

  • Issue#215geeknik2025-12-10 15:21
    Missing Type Guards in 2FA QR Code Initialization
  • Issue#213vaadata-brzuszekm12025-11-28 10:22
    [Security] Vulnerability reporting / Proposal to enable Private Reporting
  • Issue comment#209ssl2025-09-26 10:22
    A Feature Request or Two
  • Issue#207ssl2025-09-26 10:15
    I installed the extension module, but when XSS is triggered, the callback interface will 500
  • Issue#211notakodr2025-09-23 05:28
    Screenshots Not Working
  • Issue#212lattepanda205-dev2025-09-18 20:55
    Recommend adding notifications via Discord or Telegram bots.
  • Issue#209geeknik2025-09-04 15:13
    A Feature Request or Two
  • Issue comment#203ssl2025-08-19 09:51
    ezXSS docker in front of reverse proxy callback url has "http" protocol which results in "mixed content" browser error
  • Issue comment#177ssl2025-08-06 15:38
    Screenshot functionality not working
  • Issue comment#177lc2025-08-06 15:09
    Screenshot functionality not working
  • Issue comment#204marcelo3212025-07-28 16:18
    Problem with alternative payloads
  • Issue#204marcelo3212025-07-28 16:18
    Problem with alternative payloads
  • Issue#204marcelo3212025-07-28 16:15
    Problem with alternative payloads
  • Issue comment#203ssl2025-07-27 08:46
    ezXSS docker in front of reverse proxy callback url has "http" protocol which results in "mixed content" browser error
  • Issue comment#203BoBeR1822025-07-27 00:33
    ezXSS docker in front of reverse proxy callback url has "http" protocol which results in "mixed content" browser error
  • Issue#203BoBeR1822025-07-26 22:26
    ezXSS docker in front of reverse proxy callback url has "http" protocol which results in "mixed content" browser error
  • Releasessl2025-07-20 20:47
    ezXSS v4.3
  • Issue#202ssl2025-06-19 23:04
    Lack of access control on reports (IDOR)
  • Pull request#201ssl2025-06-11 22:19
  • Issue comment#201ssl2025-06-11 22:19
    Update Trigger.php
  • Issue#198ssl2025-05-28 14:18
    Docker DB Error
  • Issue comment#198ssl2025-05-28 14:18
    Docker DB Error
  • Issue comment#188ssl2025-05-27 21:49
    ezProxy issue displaying page with Angular application
  • Issue#176ssl2025-05-24 09:53
    Feature request: Automatic spider
  • Issue#200ssl2025-05-24 09:53
    Application settings broken after last commit due to missing extensions table

Totals cover only the window loaded into ClickHouse and count events, not GitHub's lifetime totals — 130 stars here means stars gained during the window, not the repo's star count.