https://github.com/s0md3v/JShell

JShell - Get a JavaScript shell with XSS.
https://github.com/s0md3v/JShell

Last synced: about 17 hours ago
JSON representation

JShell - Get a JavaScript shell with XSS.

• Host: GitHub
• URL: https://github.com/s0md3v/JShell
• Owner: s0md3v
• Created: 2018-02-26T13:40:55.000Z (over 6 years ago)
• Default Branch: master
• Last Pushed: 2019-05-05T15:49:41.000Z (over 5 years ago)
• Last Synced: 2024-05-17T01:24:15.381Z (6 months ago)
• Language: Python
• Size: 4.88 KB
• Stars: 504
• Watchers: 25
• Forks: 140
• Open Issues: 1
• Metadata Files:
  • Readme: README.md

Awesome Lists containing this project

README

        
# JShell

JShell - Get a JavaScript shell with XSS.

### Usages

Run shell.py and JShell will automatically try to detect your IP address, default LPORT is 33.



As you can see the payload has been generated and now all you have to do is to deliver this payload to the victim.

As soon as you do that, you will get a JS shell over netcat where you can execute your JavaScript code in victim's browser as soon as the injected page is open.

Here's a screenshot:



#### Credits, Disclaimer & License

This script uses the method demostrated by Rodolfo Assis

Disclaimer: I am not responsible for the shit you do with this tool.


This work is licensed under a Creative Commons Attribution 4.0 International License.