Sample code for exfiltrating data through an XSS vulnerability. XSS Payload retrieves sensitive data in victim's browser, then breaks it into chunks. Sends those chunks out as image requests (data in image filename). Example commands and python script to put the original data back together.
☆22May 11, 2021Updated 5 years ago
Alternatives and similar repositories for XSS-Data-Exfil
Users that are interested in XSS-Data-Exfil are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- 🚀 Sling Shot R3con: Automate Your Bug Bounty and Pentest Reconnaissance with Project Discovery tools 🎯☆25Sep 21, 2023Updated 3 years ago
- A framework to kickstart yourself in making malicious USB devices using ATTiny85.☆13Jun 11, 2025Updated last year
- HTTP requests of FrontPage expolit☆26Dec 19, 2013Updated 12 years ago
- For finding secrets, tokens and other common mistakes made by developers.☆12Oct 21, 2025Updated 11 months ago
- A PHP tool to brute force vhost configured on a server.☆89Dec 2, 2022Updated 3 years ago
- AI Agents on DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- Collection of notes for talks☆13Jan 6, 2024Updated 2 years ago
- ☆14Jul 21, 2024Updated 2 years ago
- cve-2021-42013.py is a python script that will help in finding Path Traversal or Remote Code Execution vulnerability in Apache 2.4.50☆27Jan 23, 2023Updated 3 years ago
- A compiler for the Meta Attack Language☆16Apr 11, 2022Updated 4 years ago
- Simple tool to test for SSRF/OOB HTTP Read within the Path of a request☆30Aug 2, 2019Updated 7 years ago
- Interactive Shells like PsExec, but in Go☆16Apr 30, 2025Updated last year
- Latex template based on the typographic memoir class for formatting PhD dissertations. Suitable for any areas but devised for computer sc…☆18May 14, 2012Updated 14 years ago
- pathogen bundle of DrawIt plugin by DrChip☆11Sep 20, 2016Updated 10 years ago
- Learn how to intercept flutter apps☆25Jan 19, 2024Updated 2 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- The OWASP Testing Guide v4.2 Checlist [2023]☆13Jan 15, 2023Updated 3 years ago
- The largest hacking program with new tools CVE-2023-PoC for the year 2023 It contains all the attack and exploitation tools for testing w…☆20Feb 5, 2024Updated 2 years ago
- CLI script to use GadgetProbe as a library to generate serialized payloads of DNS callbacks to free DNSbin to probe what Java classpaths …☆14Jun 8, 2021Updated 5 years ago
- Wayfiles is a tool designed to search for juicy files and URLs within a folder/file with results of tools like gau, waymore, waybackurls,…☆16Feb 22, 2026Updated 7 months ago
- IP over DNS tunnel☆23May 23, 2017Updated 9 years ago
- Terraform module for creating and managing VM Qemu resources☆16Apr 25, 2022Updated 4 years ago
- Caeser Cipher your shellcode!☆20Mar 11, 2022Updated 4 years ago
- This project is aimed at freely providing technical guides on various hacking topics: Active Directory services, web services, servers, i…☆16Oct 22, 2020Updated 5 years ago
- A handy plugin for copying requests/responses directly from Burp, some extra magic included.☆13Oct 15, 2021Updated 4 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- ☆13Jul 25, 2023Updated 3 years ago
- ☆14Oct 14, 2016Updated 9 years ago
- ☆15Dec 12, 2023Updated 2 years ago
- A Multi-Processing Tool for collecting and extracting information to an Excel file from a Burp Suite output file.☆10Apr 8, 2024Updated 2 years ago
- The following code when compiled in go takes a domain name as an argument and outputs an HTML file with Google Search links for various d…☆18Sep 11, 2024Updated 2 years ago
- Siphon converts virtually any content source into clean, readable Markdown. Built for developers, pentesters, appsec professionals, and a…☆13Mar 14, 2026Updated 6 months ago
- A collection of js analysis tools & scripts.☆19May 4, 2026Updated 4 months ago
- Here we are gather all Nuclei Templates that are Publically available.☆15Apr 28, 2024Updated 2 years ago
- A tool to notify you of the latest changes in bug bounty programs.☆16Jan 24, 2025Updated last year
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- JavaScript functions intended to be used as an XSS payload against a WordPress admin account.☆58Oct 6, 2020Updated 5 years ago
- ☆25Apr 29, 2025Updated last year
- Exploit for cve-2024-10914: D-Link DNS-320, DNS-320LW, DNS-325, DNS-340L Version 1.00, Version 1.01.0914.2012, Version 1.01, Version 1.02…☆15Nov 9, 2024Updated last year
- My little polygon for common lisp adventures (games and experiments)☆18Jul 12, 2017Updated 9 years ago
- JavaScript beacons and C2 to be used for XSS payload or post exploitation implants on webapp servers or desktop software to monitor users…☆479Jul 9, 2026Updated 2 months ago
- ☆11Sep 3, 2023Updated 3 years ago
- A suggested path for learning Vim's scripting language, VimL☆20Jun 14, 2014Updated 12 years ago