Harvest data from XSS vulnerabilites to XSS-Data-Harvestor API
Example: Hijack Cookies by exploting XSS vulnerable applications to dump and retreive data over the internet using ssh tunelling or on hosted platform.
-
Install Python
-
Install requirements
python -m pip install -r requirements.txt
-
using flask
python app.py # debug mode -
Using gunicorn wsgi
gunicorn wsgi:app --bind 0.0.0.0:5000
| Endpoint | Methods | Description |
|---|---|---|
| /api/ | * | API home |
| /api/hacked | GET, POST | accepts hacked data in json/form data format or from url parameter |
| /api/get_hacked_data | GET | returns hacked data in json format |