Sample code for exfiltrating data through an XSS vulnerability. XSS Payload retrieves sensitive data in victim's browser, then breaks it into chunks. Sends those chunks out as image requests (data in image filename). Example commands and python script to put the original data back together.
☆22May 11, 2021Updated 5 years ago
Alternatives and similar repositories for XSS-Data-Exfil
Users that are interested in XSS-Data-Exfil are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- 🚀 Sling Shot R3con: Automate Your Bug Bounty and Pentest Reconnaissance with Project Discovery tools 🎯☆25Sep 21, 2023Updated 2 years ago
- HTTP requests of FrontPage expolit☆26Dec 19, 2013Updated 12 years ago
- Fuzzer for finding Open Mail Relays☆14May 16, 2026Updated 2 months ago
- Accompanying material needed for the workshop☆11Jun 14, 2023Updated 3 years ago
- For finding secrets, tokens and other common mistakes made by developers.☆12Oct 21, 2025Updated 9 months ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- ☆14Sep 1, 2024Updated last year
- A PHP tool to brute force vhost configured on a server.☆89Dec 2, 2022Updated 3 years ago
- A detailed guide to setting up a QEMU/KVM for gaming.☆14Nov 24, 2023Updated 2 years ago
- Gathering All Nuclei Fuzzing Templates in a Single Repo.☆11Apr 23, 2024Updated 2 years ago
- Collection of notes for talks☆13Jan 6, 2024Updated 2 years ago
- A compiler for the Meta Attack Language☆16Apr 11, 2022Updated 4 years ago
- Les réflexions menées au cours du 404CTF 2023 pour résoudre les challenges proposés☆11Dec 16, 2023Updated 2 years ago
- Simple tool to test for SSRF/OOB HTTP Read within the Path of a request☆30Aug 2, 2019Updated 6 years ago
- Latex template based on the typographic memoir class for formatting PhD dissertations. Suitable for any areas but devised for computer sc…☆18May 14, 2012Updated 14 years ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- A collection of custom built scripts to exploit known vulnerability chains☆27Jul 23, 2021Updated 5 years ago
- The PhoneNumberParser node is a useful tool for working with phone numbers in your n8n workflows☆15Jan 5, 2026Updated 6 months ago
- pathogen bundle of DrawIt plugin by DrChip☆11Sep 20, 2016Updated 9 years ago
- The OWASP Testing Guide v4.2 Checlist [2023]☆13Jan 15, 2023Updated 3 years ago
- CLI script to use GadgetProbe as a library to generate serialized payloads of DNS callbacks to free DNSbin to probe what Java classpaths …☆14Jun 8, 2021Updated 5 years ago
- Wayfiles is a tool designed to search for juicy files and URLs within a folder/file with results of tools like gau, waymore, waybackurls,…☆16Feb 22, 2026Updated 5 months ago
- A service container for interacting with SRA's VECTR☆18Apr 9, 2025Updated last year
- Update the IP address of a given domain using cPanel 2 API☆13Dec 3, 2018Updated 7 years ago
- Basic network port scanner created in C#☆19Aug 1, 2019Updated 6 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- Caeser Cipher your shellcode!☆21Mar 11, 2022Updated 4 years ago
- This project is aimed at freely providing technical guides on various hacking topics: Active Directory services, web services, servers, i…☆16Oct 22, 2020Updated 5 years ago
- A handy plugin for copying requests/responses directly from Burp, some extra magic included.☆13Oct 15, 2021Updated 4 years ago
- ☆13Jul 25, 2023Updated 3 years ago
- ☆14Oct 14, 2016Updated 9 years ago
- ☆15Dec 12, 2023Updated 2 years ago
- The following code when compiled in go takes a domain name as an argument and outputs an HTML file with Google Search links for various d…☆17Sep 11, 2024Updated last year
- A collection of js analysis tools & scripts.☆19May 4, 2026Updated 2 months ago
- Here we are gather all Nuclei Templates that are Publically available.☆15Apr 28, 2024Updated 2 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- JavaScript functions intended to be used as an XSS payload against a WordPress admin account.☆58Oct 6, 2020Updated 5 years ago
- My little polygon for common lisp adventures (games and experiments)☆18Jul 12, 2017Updated 9 years ago
- A personal repository of notes about learning lisp patterns☆16Mar 9, 2023Updated 3 years ago
- Tool to download IP ranges of CDN providers for bug bounties☆14Jul 24, 2024Updated 2 years ago
- See more at:☆16Jun 3, 2019Updated 7 years ago
- A Web Browser for Wii.☆14Jun 18, 2026Updated last month
- A list of useful payloads and bypass for Web Application Security☆14Nov 26, 2023Updated 2 years ago