Description
XSS Shell FOR LINUX
XSS Shell script is a powerful XSS backdoor that allows interactively gaining control over a Cross-site Scripting (XSS) vulnerability in a web application. It showcases the real power and damage of Cross-site Scripting attacks.
Features:
- XSS Shell re-renders the infected page and keeps the user in a virtual environment, maintaining control even if the user clicks on links within the infected page (within cross-domain restrictions).
- Session remains open, preventing timeouts even if the victim follows an external link from the infected page, ensuring continual control.
- Mouse Logger captures click points and the current DOM.
- Functionality includes getting Keylogger Data, Current Page (Current rendered DOM / like screenshot), Cookie, executing supplied JavaScript (eval), getting Clipboard (IE only), acquiring internal IP address (Firefox + JVM only), checking victim's visited URL history, initiating DDoS, and forcing a crash on the victim's browser.
Limitations:
- Keylogger does not work on IE.
- May not function for framed pages due to frame regeneration.
- Not compatible with Konqueror.
What's New in This Release:
- Connection drop timeout check implemented to repair the server if the XSS Shell server is down or the connection is dropped due to the victim.
- DoS and Crash commands added for enhanced capabilities.
Tags:
User Reviews for XSS Shell FOR LINUX 7
-
XSS Shell FOR LINUX provides advanced XSS backdoor control. The virtual environment feature ensures continuous control, making it powerful for XSS attacks.
-
XSS Shell is an incredible tool for understanding XSS vulnerabilities. The features are powerful and user-friendly!
-
Absolutely love this app! It provides deep insights into XSS attacks and helps improve web security effectively.
-
This app is a game changer! The ability to keep control of the session while exploring XSS vulnerabilities is brilliant.
-
XSS Shell has exceeded my expectations! It's easy to use and offers advanced features that are essential for testing.
-
A must-have app for developers! The interactive controls make it easier to grasp the complexities of XSS attacks.
-
Fantastic app! The new features enhance its functionality, making it indispensable for anyone working in web security.