firesunCN/BlueLotus_XSSReceiver

Health v2 · maintenance only

Flags: no_releases

Adoption not part of the score

1623 stars · 972 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

BlueLotus_XSSReceiver is a self-hosted XSS data receiving platform written in PHP and JavaScript, designed for CTF practice and security learning. It requires no database, records all incoming request data (GET, POST, cookies, headers, client info), and lets users manage XSS JavaScript payloads with templates, an editor, and keep-session functionality.

Use cases

• receive and log XSS payload callbacks during CTF challenges
• capture cookies and session data from XSS vulnerabilities in authorized tests
• manage and generate XSS JavaScript payloads with templates
• keep stolen sessions alive with keepsession
• look up attacker-collected victim info by IP, browser, and OS

When to choose

• you need a quick, database-free XSS receiver for CTF competitions
• you want a simple PHP platform deployable on shared hosting
• you need payload JS management with editing, formatting, and minification built in

When to avoid

• you need a production-grade or actively developed security tool
• your use case is unauthorized testing of systems you do not own
• you require modern PHP frameworks or database-backed storage

Facets

application · maturity maintenance

security logging http-server security penetration-testing web-development php self-hosted xss ctf penetration-testing payload-management no-database web-server

Member repositories

For agents

markdown · JSON · MCP: product_card(name="firesunCN/BlueLotus_XSSReceiver")