Mirrors/xss_payloads
2
0
Fork 0
mirror of https://github.com/nettitude/xss_payloads.git synced 2025-02-16 12:38:26 +00:00
Code Issues Projects Releases Packages Wiki Activity

Updated readme for recon.php

Browse source
This commit is contained in:
strawp 2017-01-13 12:29:25 +00:00
parent 73f11946bc
commit 51a3a1c4b5
1 changed files with 13 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

13
README.md
View file

@ -46,6 +46,19 @@ Get the internal IP address of a victim and then have them do a TCP port scan of
Pop up a login page which sends the entered credentials back to this URL.
### recon.php ###
Passes back information about where it was executed:
- page URL
- script URL
- user's IP address
- Page content
- Any non HttpOnly cookies present
- User agent string
And then logs it all into either a file or a database. Great for when a collaborator alert is generated asynchronously and you need more info about where execution is occuring.
### unc_hashstealer.php
Fire up Responder.py on the same host as this script and then inject this payload. All links on the injected page will be turned into UNC paths to the same host.