Mon, 01 Jan 0001 00:00:00 +0000

HTTPS Exfiltration Server#

Use interact.sh. This is the cheapest (free) one for POC. Otherwise, setup your own exfiltration server on cloud, or on prem if you’re nuts

Create a certificate. Outside of lab environment, better set this up with Nginx or Apache2 and request cert from letsencrypt

openssl req -new -x509 -keyout server.pem -out server.pem -days 365 -nodes

For payloads in XSS - Cross Site Scripting. This simple server will base64 decode data key in json string like {"data": "b64-string"}

SpellBook