hoodoer / javascriptFileEncoder

Encodes a file into JavaScript friendly hex data, useful for adding file uploads to session riding XSS payloads

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

javascriptFileEncoder

Encodes a file into JavaScript friendly hex data, useful for adding file uploads to session riding XSS payloads

For example, if you're trying to do XHR requests to install a wordpress plugin from XSS running in a wordpress administrator context, you'd need the actual zip file of the wordpress plugin encoded and embedded in your javascript. See https://github.com/hoodoer/WP-XSS-Admin-Funcs for an example of embedding a file in an XSS payload

It's a python wrapper around the xxd command.

Updated for python3

About

Encodes a file into JavaScript friendly hex data, useful for adding file uploads to session riding XSS payloads

License:The Unlicense


Languages

Language:Python 100.0%