xsstools: xss development frameworks

From securityonline.info


xsstools is an xss development framework, with the goal of making payload writing easier.


A collection of exfiltrators is available

  • message: use postMessage
  • get: use fetch GET
  • post: use fetch POST urlencoded
  • postJSON: use fetch POST json encoded
  • sendBeacon: use navigator.sendBeacon
  • console: for debugging, simply use console.log
  • img: create an img tag to exfiltrate via GET
  • style: create a style tag to exfiltrate via GET
  • iframe: create an iframe tag to exfiltrate via GET

Read more…