This is a set of class which can secure the application against XSS and SQL Injection

XSS HTTP Inject0r is a proof of concept tool that shows how XSS (Cross Site Scripting) flags can be exploited easily. It is written in HTML + Javascript + PHP and released under GPLv3.

jsoup xssfilter

Welcome to the XSS Challenge Wiki!

(DOM-)XSS fuzzer based on phantomjs and go.

Proof of Concept code for CVE-2015-0345 (APSB15-07)

A simple blog web app with emphasis on web security

A project to filter SQL Injection and XSS attacks using ANN -- in Ruby

Automatically exported from code.google.com/p/domxsswiki

XSS lab

Awesome XSS Payloads

Extraction of iMessage Data via XSS

Context-Sensitive Auto-Sanitization for PHP

This covers how to send mail in php and how to protect against Cross-Site Scripting attacks (XSS)

List of advanced XSS payloads

A project that is intentionally vulnerable to e.g. XSS, CSRF and SQL injection

The XSS Hunter service - a portable version of XSSHunter.com

Insecure Web Application for CyberSecurityBase

Based on native Python module HTMLParser purifier of HTML, To Clear all javascript in html

List of advanced XSS payloads