XSS HTTP Inject0r is a proof of concept tool that shows how XSS (Cross Site Scripting) flags can be exploited easily.
To deploy it:
PoC (proof of concept):
There are different 'sandboxes' ready to try your XSS injections, locally.
Enter this info to see how some flags can be exploited:
This feature creates automatically a malicious code that can be sent to targets like a non-suspicious URL (ex: Index.html) to 'hook' them.
If someone click on it, will execute your exploit code. This is nice for cookie grabbing, history stealing, etc..
Use sandboxes to test your hooks locally.
Happy Cross Hacking!