From securityonline.info
xsstools
xsstools is an xss development framework, with the goal of making payload writing easier.
Exfiltrators
A collection of exfiltrators is available
- message: use postMessage
- get: use fetch GET
- post: use fetch POST urlencoded
- postJSON: use fetch POST json encoded
- sendBeacon: use navigator.sendBeacon
- console: for debugging, simply use console.log
- img: create an img tag to exfiltrate via GET
- style: create a style tag to exfiltrate via GET
- iframe: create an iframe tag to exfiltrate via GET