Sample code for exfiltrating data through an XSS vulnerability. XSS Payload retrieves sensitive data in victim's browser, then breaks it into chunks. Sends those chunks out as image requests (data in image filename). Example commands and python script to put the original data back together.
☆22May 11, 2021Updated 5 years ago
Alternatives and similar repositories for XSS-Data-Exfil
Users that are interested in XSS-Data-Exfil are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- 🚀 Sling Shot R3con: Automate Your Bug Bounty and Pentest Reconnaissance with Project Discovery tools 🎯☆25Sep 21, 2023Updated 2 years ago
- A framework to kickstart yourself in making malicious USB devices using ATTiny85.☆14Jun 11, 2025Updated last year
- HTTP requests of FrontPage expolit☆26Dec 19, 2013Updated 12 years ago
- Preparation of Attack & Defense CTF for iHack 2022☆16Nov 28, 2023Updated 2 years ago
- Fuzzer for finding Open Mail Relays☆14May 16, 2026Updated 3 months ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Accompanying material needed for the workshop☆11Jun 14, 2023Updated 3 years ago
- For finding secrets, tokens and other common mistakes made by developers.☆12Oct 21, 2025Updated 9 months ago
- ☆14Sep 1, 2024Updated last year
- -notes and scripts for online course OffIOT☆13Jan 19, 2026Updated 6 months ago
- A PHP tool to brute force vhost configured on a server.☆89Dec 2, 2022Updated 3 years ago
- A detailed guide to setting up a QEMU/KVM for gaming.☆15Nov 24, 2023Updated 2 years ago
- Gathering All Nuclei Fuzzing Templates in a Single Repo.☆11Apr 23, 2024Updated 2 years ago
- Wrap the sync-glitch CLI to enable execute the command as GitHub Action☆15Jan 2, 2019Updated 7 years ago
- A compiler for the Meta Attack Language☆16Apr 11, 2022Updated 4 years ago
- Serverless GPU API endpoints on Runpod - Get Bonus Credits • AdSkip the infrastructure headaches. Auto-scaling, pay-as-you-go, no-ops approach lets you focus on innovating your application.
- Les réflexions menées au cours du 404CTF 2023 pour résoudre les challenges proposés☆11Dec 16, 2023Updated 2 years ago
- Simple tool to test for SSRF/OOB HTTP Read within the Path of a request☆30Aug 2, 2019Updated 7 years ago
- An extension for Sentry which allows you to track the most active projects ala ``top``☆16Feb 25, 2014Updated 12 years ago
- Latex template based on the typographic memoir class for formatting PhD dissertations. Suitable for any areas but devised for computer sc…☆18May 14, 2012Updated 14 years ago
- A collection of custom built scripts to exploit known vulnerability chains☆27Jul 23, 2021Updated 5 years ago
- The PhoneNumberParser node is a useful tool for working with phone numbers in your n8n workflows☆15Jan 5, 2026Updated 7 months ago
- The OWASP Testing Guide v4.2 Checlist [2023]☆13Jan 15, 2023Updated 3 years ago
- Learn how to intercept flutter apps☆25Jan 19, 2024Updated 2 years ago
- Wayfiles is a tool designed to search for juicy files and URLs within a folder/file with results of tools like gau, waymore, waybackurls,…☆16Feb 22, 2026Updated 5 months ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- CLI script to use GadgetProbe as a library to generate serialized payloads of DNS callbacks to free DNSbin to probe what Java classpaths …☆14Jun 8, 2021Updated 5 years ago
- A service container for interacting with SRA's VECTR☆18Apr 9, 2025Updated last year
- Basic network port scanner created in C#☆19Aug 1, 2019Updated 7 years ago
- Caeser Cipher your shellcode!☆20Mar 11, 2022Updated 4 years ago
- This project is aimed at freely providing technical guides on various hacking topics: Active Directory services, web services, servers, i…☆16Oct 22, 2020Updated 5 years ago
- A handy plugin for copying requests/responses directly from Burp, some extra magic included.☆13Oct 15, 2021Updated 4 years ago
- ☆13Jul 25, 2023Updated 3 years ago
- ☆14Oct 14, 2016Updated 9 years ago
- ☆15Dec 12, 2023Updated 2 years ago
- Proton VPN Special Offer - Get 70% off • AdSpecial partner offer. Trusted by over 100 million users worldwide. Tested, Approved and Recommended by Experts.
- An implementation of EndpointSecurity on the 5BSD kernel.☆17May 31, 2026Updated 2 months ago
- A Multi-Processing Tool for collecting and extracting information to an Excel file from a Burp Suite output file.☆10Apr 8, 2024Updated 2 years ago
- The following code when compiled in go takes a domain name as an argument and outputs an HTML file with Google Search links for various d…☆17Sep 11, 2024Updated last year
- Siphon converts virtually any content source into clean, readable Markdown. Built for developers, pentesters, appsec professionals, and a…☆14Mar 14, 2026Updated 5 months ago
- A collection of js analysis tools & scripts.☆19May 4, 2026Updated 3 months ago
- Here we are gather all Nuclei Templates that are Publically available.☆15Apr 28, 2024Updated 2 years ago
- OWASP practice lab, just a few copy/pastes away. Fully stacked and ready to go with Docker☆23Oct 13, 2018Updated 7 years ago