Ecosyste.ms: Awesome
An open API service indexing awesome lists of open source software.
https://github.com/miguelzacca/afs
Redirection of sensitive form data to a remote server. Self-XSS
https://github.com/miguelzacca/afs
cheat dom-manipulation dommanipulation exploit google-hacking googlehacking hacking javascript js json ngrok node nodejs self-xss server vulnerability xss xss-injection
Last synced: 9 days ago
JSON representation
Redirection of sensitive form data to a remote server. Self-XSS
- Host: GitHub
- URL: https://github.com/miguelzacca/afs
- Owner: miguelzacca
- License: mit
- Created: 2024-03-16T21:26:25.000Z (8 months ago)
- Default Branch: main
- Last Pushed: 2024-04-01T14:02:38.000Z (8 months ago)
- Last Synced: 2024-04-01T15:26:02.910Z (8 months ago)
- Topics: cheat, dom-manipulation, dommanipulation, exploit, google-hacking, googlehacking, hacking, javascript, js, json, ngrok, node, nodejs, self-xss, server, vulnerability, xss, xss-injection
- Language: JavaScript
- Homepage:
- Size: 685 KB
- Stars: 1
- Watchers: 1
- Forks: 0
- Open Issues: 0
-
Metadata Files:
- Readme: README.md
- License: LICENSE
Awesome Lists containing this project
README
# AFS
Redirection of sensitive form data to a remote server. Self-XSS attack
## Installation
To install the necessary dependencies, run the following command
```npm
npm install
```
You will also need to register with ngrok and configure your token. https://ngrok.com
## Use
Start the server that will receive the information
```npm
npm run server
```
After that, in another terminal start ngrok
```npm
npm run ngrok
```
Take the web link that ngrok provides "Forwarding", and place it inside the variable ```const redirect_data``` in ```AFS.js```.
Finally, copy the contents of ```AFS.js``` and paste it into the target site's devtools console on any PC.
## Disclaimer
This repository contains code primarily focused on DOM manipulation with Javascript for educational or knowledge purposes. The author disclaims any responsibility for misuse and will not be responsible for any damages arising from the use or misuse of the code. This repository is intended solely for educational and research purposes, and any illegal activities are strictly prohibited.