+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Website Hacking (https://hackforums.net/forumdisplay.php?fid=43)
+---- Thread: Ultimate XSS Shell and XSS Exploiter (/showthread.php?tid=1833815)
Ultimate XSS Shell and XSS Exploiter - Hi-coder.com - Oct 18, 2011
Hey Guys
me and my team is working on K22-XSS-Penetration-Framework since 2 months. we are almost complete.
all the features are new , advance , Silent and Extreme
i want to ask something
"what would you like to have in our new tool"
any ability , feature , code , anything else ?
i like to hear your suggestions
* - JoinSeventh - Oct 18, 2011
Maybe you should give us some information about what's already in the framework.
* - Hi-coder.com - Oct 18, 2011
its surprise
but i can give you hint
"we have added advance type of tabnapping"
"two types of connections bridge / direct"
"create exploit and run it like metasploit"
"5 types of payload encryptor"
* - Hooded Robin - Oct 18, 2011
Can you control multiple victims at once like in XSS Shell? It would be nice to automate a way of handing off XSS Zombies to Browser Exploiter (i.e. incorporate some of MSF's Broswer Autopwn features and have option to do this instead of steal cookie,alert,snapshot,etc). Is the the tabnapping and other features restricted to site domain or will it follow the victim if they leave the page? (i.e. as long as they have there browser open you own them). You should provide some screenshots or something to give a better idea of what you have so we can be more helpful in suggestions.
* - Hi-coder.com - Oct 18, 2011
1 :as long as page is open you can even see his browser with [ scrolls , mouse pointer , keystrokes ]
2 :yes it can handle multiply victims at once
3 :i am using some metasploit and some predefined exploits to make a auto-exploit functions
you can also select or generate shellcode [ D&E , Command Execute . etc... ]
* - AsSasinReLoaded - Nov 21, 2013
waiting for the tool to be released ! :)
* - Yewnix07 - Nov 21, 2013
im a bit curious to see how effective this is when its complete
* - -๖ۣۜDivine- - Nov 21, 2013
(Nov 21, 2013 07:05 AM)AsSasinReLoaded Wrote: waiting for the tool to be released ! :)
Because grave-digging this thread is obviously going to make him release it. Just use beef.
* - dapeamel - Nov 10, 2016
What's the status of you tool :)? is it made yet?.