Sample code for exfiltrating data through an XSS vulnerability. XSS Payload retrieves sensitive data in victim's browser, then breaks it into chunks. Sends those chunks out as image requests (data in image filename). Example commands and python script to put the original data back together.
☆22May 11, 2021Updated 5 years ago
Alternatives and similar repositories for XSS-Data-Exfil
Users that are interested in XSS-Data-Exfil are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- 🚀 Sling Shot R3con: Automate Your Bug Bounty and Pentest Reconnaissance with Project Discovery tools 🎯☆24Sep 21, 2023Updated 3 years ago
- A Synapse Rapid Power-Up that allows Synapse to interact with Assemblyline v4.☆10Apr 13, 2024Updated 2 years ago
- Android IPC research workbench. Build, capture, replay and fuzz Intents.☆13Jun 11, 2026Updated 4 months ago
- Accompanying material needed for the workshop☆11Jun 14, 2023Updated 3 years ago
- National Vulnerability Database (NVD) implemented by rust☆25May 1, 2026Updated 6 months ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- King-of-the-Hill game for the 2nd International Cybersecurity Challenge @ San Diego, California USA☆15Aug 9, 2023Updated 3 years ago
- ☆32Oct 22, 2026Updated 2 weeks ago
- Explore a rich collection of diverse payloads in these GitHub repositories. 🚀☆12Apr 9, 2026Updated 6 months ago
- Random permuation generation driver in NetBSD☆11Jan 10, 2017Updated 9 years ago
- Automated CV generation pipeline - GitHub template for multi-variant LaTeX CVs☆17Sep 13, 2026Updated last month
- ☆10Oct 23, 2025Updated last year
- A proof-of-concept to demonstrate randomized execution paths and their impact on call stack signatures — ideal for EDR testing, behavior-…☆24Jan 17, 2026Updated 9 months ago
- Python for offensive security research☆12Jul 19, 2026Updated 3 months ago
- Enumerate your Kubernetes cluster with just 1 command☆12Updated this week
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- repository contains main files and sources of the tool☆19Jul 20, 2025Updated last year
- my phork of elkowar's phork of phocus.☆11Jul 11, 2022Updated 4 years ago
- For finding secrets, tokens and other common mistakes made by developers.☆12Oct 21, 2025Updated last year
- open-source mail forwarding stack☆16Jun 19, 2026Updated 4 months ago
- ☆10Sep 17, 2024Updated 2 years ago
- Preparation of Attack & Defense CTF for iHack 2022☆16Nov 28, 2023Updated 2 years ago
- Pull Wordle solutions from the Twitter API and displays them on a tiny 5x5 LED matrix☆10Feb 16, 2022Updated 4 years ago
- Passphrase wordlist and hashcat rules for offline cracking of long, complex passwords☆13May 2, 2018Updated 8 years ago
- Simple tool to test for SSRF/OOB HTTP Read within the Path of a request☆30Aug 2, 2019Updated 7 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- A PHP tool to brute force vhost configured on a server.☆89Dec 2, 2022Updated 3 years ago
- Offensive Powershell obfuscator☆28Sep 6, 2024Updated 2 years ago
- UnicastDeauth is a simple Python 3 script that automates unicast Wi-Fi deauthentication attacks☆11Jul 23, 2026Updated 3 months ago
- A compiler for the Meta Attack Language☆16Apr 11, 2022Updated 4 years ago
- Windows 11 Syscall table. Ready to use in direct syscall. Actively maintained.☆26Dec 4, 2021Updated 4 years ago
- ☆49Feb 26, 2026Updated 8 months ago
- The OWASP Testing Guide v4.2 Checlist [2023]☆13Jan 15, 2023Updated 3 years ago
- A backdoor is a tool used to gain remote access to a machine. Typically, backdoor utilities such as NetCat have 2 main functions: to pip…☆13Apr 26, 2021Updated 5 years ago
- Siphon converts virtually any content source into clean, readable Markdown. Built for developers, pentesters, appsec professionals, and a…☆13Mar 14, 2026Updated 7 months ago
- Serverless GPU API endpoints on Runpod - Get Bonus Credits • AdSkip the infrastructure headaches. Auto-scaling, pay-as-you-go, no-ops approach lets you focus on innovating your application.
- ☆14Jul 21, 2024Updated 2 years ago
- Interactive Shells like PsExec, but in Go☆16Apr 30, 2025Updated last year
- A list of shodan filters☆10Nov 25, 2018Updated 7 years ago
- python3 scripts to help with aws triage needs☆14Feb 11, 2022Updated 4 years ago
- A small tool to convert Base64-encoded .kirbi tickets from Rubeus into .ccache files for Impacket☆75May 18, 2020Updated 6 years ago
- A simple packet sniffer written in Go☆12Dec 22, 2023Updated 2 years ago
- JavaScript beacons and C2 to be used for XSS payload or post exploitation implants on webapp servers or desktop software to monitor users…☆487Jul 9, 2026Updated 3 months ago