A keylogging script that can be infused into sites defenseless against cross-site prearranging.
The content tracks client keypresses by linking each keypress into a string that is Presented on a server.
The content can be found in record keylogscript.html and can be tried on document captainslog.html. The POST demand is right now remarked out, yet if you needed to utilize it, just uncomment and give your desired URL the information to be shipped off.
captainslog.html was a task finished for my web programming class, and is one of numerous XSS-weak pages that I've made. Essentially glue the content (without newlines) into the textbox and submit. On other weak sites, contents might should be a body boundary sent by means of POST.
This can likewise physically be added to the source code of sites through designer console. Basically open up a site page, bust open the component examiner and glue the content into the HTML. Then, at that point, close the reviewer and let your objective do their thing. Note that this is untested.
Not dependable any commotion that follows, nor am I embracing any dark cap movement.
The content tracks client keypresses by linking each keypress into a string that is Presented on a server.
The content can be found in record keylogscript.html and can be tried on document captainslog.html. The POST demand is right now remarked out, yet if you needed to utilize it, just uncomment and give your desired URL the information to be shipped off.
captainslog.html was a task finished for my web programming class, and is one of numerous XSS-weak pages that I've made. Essentially glue the content (without newlines) into the textbox and submit. On other weak sites, contents might should be a body boundary sent by means of POST.
This can likewise physically be added to the source code of sites through designer console. Basically open up a site page, bust open the component examiner and glue the content into the HTML. Then, at that point, close the reviewer and let your objective do their thing. Note that this is untested.
Not dependable any commotion that follows, nor am I embracing any dark cap movement.