Sample code for exfiltrating data through an XSS vulnerability. XSS Payload retrieves sensitive data in victim's browser, then breaks it into chunks. Sends those chunks out as image requests (data in image filename). Example commands and python script to put the original data back together.
☆21May 11, 2021Updated 5 years ago
Alternatives and similar repositories for XSS-Data-Exfil
Users that are interested in XSS-Data-Exfil are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- 🚀 Sling Shot R3con: Automate Your Bug Bounty and Pentest Reconnaissance with Project Discovery tools 🎯☆25Sep 21, 2023Updated 3 years ago
- Rust C2 agent for Mythic that produces polymorphic shellcode: per-build function shuffle + ChaCha20-encrypted data sections; no_std/no_ma…☆76May 13, 2026Updated 5 months ago
- National Vulnerability Database (NVD) implemented by rust☆24May 1, 2026Updated 5 months ago
- A framework to kickstart yourself in making malicious USB devices using ATTiny85.☆14Jun 11, 2025Updated last year
- Preparation of Attack & Defense CTF for iHack 2022☆16Nov 28, 2023Updated 2 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- Accompanying material needed for the workshop☆11Jun 14, 2023Updated 3 years ago
- An efficient spyware that is barely undetectable by antiviruses and get execute every time the computer start.☆23Apr 18, 2024Updated 2 years ago
- For finding secrets, tokens and other common mistakes made by developers.☆12Oct 21, 2025Updated 11 months ago
- ☆49Feb 26, 2026Updated 7 months ago
- Offensive Powershell obfuscator☆28Sep 6, 2024Updated 2 years ago
- A PHP tool to brute force vhost configured on a server.☆89Dec 2, 2022Updated 3 years ago
- ☆10Sep 17, 2024Updated 2 years ago
- Gathering All Nuclei Fuzzing Templates in a Single Repo.☆11Apr 23, 2024Updated 2 years ago
- ☆14Jul 21, 2024Updated 2 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Simple tool to test for SSRF/OOB HTTP Read within the Path of a request☆30Aug 2, 2019Updated 7 years ago
- ☆239Jul 26, 2026Updated 2 months ago
- A collection of custom built scripts to exploit known vulnerability chains☆27Jul 23, 2021Updated 5 years ago
- Damn Vulnerable CICS Application☆34Mar 2, 2024Updated 2 years ago
- The OWASP Testing Guide v4.2 Checlist [2023]☆13Jan 15, 2023Updated 3 years ago
- CLI script to use GadgetProbe as a library to generate serialized payloads of DNS callbacks to free DNSbin to probe what Java classpaths …☆14Jun 8, 2021Updated 5 years ago
- Wayfiles is a tool designed to search for juicy files and URLs within a folder/file with results of tools like gau, waymore, waybackurls,…☆16Feb 22, 2026Updated 7 months ago
- Interactive Shells like PsExec, but in Go☆16Apr 30, 2025Updated last year
- Basic network port scanner created in C#☆19Aug 1, 2019Updated 7 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Caeser Cipher your shellcode!☆20Mar 11, 2022Updated 4 years ago
- The largest hacking program with new tools CVE-2023-PoC for the year 2023 It contains all the attack and exploitation tools for testing w…☆20Feb 5, 2024Updated 2 years ago
- A handy plugin for copying requests/responses directly from Burp, some extra magic included.☆13Oct 15, 2021Updated 5 years ago
- A service container for interacting with SRA's VECTR☆18Apr 9, 2025Updated last year
- ☆13Jul 25, 2023Updated 3 years ago
- This project is aimed at freely providing technical guides on various hacking topics: Active Directory services, web services, servers, i…☆17Oct 22, 2020Updated 5 years ago
- ☆15Dec 12, 2023Updated 2 years ago
- Brute forcing HTTP Basic Authentication , written with Go☆10Nov 3, 2023Updated 2 years ago
- IP over DNS tunnel☆23May 23, 2017Updated 9 years ago
- GPUs on demand by Runpod - Special Offer Available • AdRun AI, ML, and HPC workloads on powerful cloud GPUs—without limits or wasted spend. Deploy GPUs in under a minute and pay by the second.
- Siphon converts virtually any content source into clean, readable Markdown. Built for developers, pentesters, appsec professionals, and a…☆13Mar 14, 2026Updated 7 months ago
- A Multi-Processing Tool for collecting and extracting information to an Excel file from a Burp Suite output file.☆10Apr 8, 2024Updated 2 years ago
- The following code when compiled in go takes a domain name as an argument and outputs an HTML file with Google Search links for various d…☆18Sep 11, 2024Updated 2 years ago
- SMBLoot is a terminal interface for browsing SMB shares, reading remote files, downloading and uploading files, and recursively inspectin…☆87Aug 9, 2026Updated 2 months ago
- ☆25Apr 29, 2025Updated last year
- A collection of js analysis tools & scripts.☆19May 4, 2026Updated 5 months ago
- Here we are gather all Nuclei Templates that are Publically available.☆15Apr 28, 2024Updated 2 years ago