# firesunCN/BlueLotus_XSSReceiver

Repository: https://github.com/firesunCN/BlueLotus_XSSReceiver
Canonical: https://ross.abutalabs.com/products/bluelotus_xssreceiver
Language: JavaScript
License: GPL-2.0
License Family: copyleft
Topics: ctf
Last push: 2023-02-02T10:10:14+00:00

## Health v2 (maintenance only)
Score: 32/100 (v2, computed 2026-09-02T17:46:02.011165+00:00)
- activity 0, release rhythm 35, longevity 100
- inputs: {"age_days": 3978, "days_push": 1308, "days_rel": null, "gap_med": null, "n_releases_24m": 0}
- flags: no_releases
- formula: round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10)

## Adoption (not part of the score)
Stars 1623, forks 972 (observed 2026-08-28T04:05:12.619325+00:00)

## What it is
BlueLotus_XSSReceiver is a self-hosted XSS data receiving platform written in PHP and JavaScript, designed for CTF practice and security learning. It requires no database, records all incoming request data (GET, POST, cookies, headers, client info), and lets users manage XSS JavaScript payloads with templates, an editor, and keep-session functionality.

## Use cases
- receive and log XSS payload callbacks during CTF challenges
- capture cookies and session data from XSS vulnerabilities in authorized tests
- manage and generate XSS JavaScript payloads with templates
- keep stolen sessions alive with keepsession
- look up attacker-collected victim info by IP, browser, and OS

## When to choose
- you need a quick, database-free XSS receiver for CTF competitions
- you want a simple PHP platform deployable on shared hosting
- you need payload JS management with editing, formatting, and minification built in

## When to avoid
- you need a production-grade or actively developed security tool
- your use case is unauthorized testing of systems you do not own
- you require modern PHP frameworks or database-backed storage

## Facets
- artifact type: application
- maturity: maintenance
- function: security, logging, http-server
- domain: security, penetration-testing, web-development
- platform: php, self-hosted
- tags: xss, ctf, penetration-testing, payload-management, no-database, web-server

## Member repositories
- firesunCN/BlueLotus_XSSReceiver (main) score 32

## Provenance
- Observed fields: from GitHub, fetched 2026-08-28T04:05:12.619325+00:00.
- Health v2: computed from the inputs above; adoption is never an input.
- Inferred fields (summary, facets, guidance): AI-extracted, prompt v1, taxonomy v1, on 2026-08-30T03:48:49.351752+00:00, confidence not recorded.
  - readme: https://github.com/firesunCN/BlueLotus_XSSReceiver (fetched 2026-08-28T04:05:12.619325+00:00, sha 643a48f360a5)
- Data as of 2026-08-30T08:39:29.467469+00:00.