Update README.md

main
witchdocsec 2024-09-09 04:39:23 +01:00 committed by GitHub
parent 152010598e
commit cdca8134af
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
1 changed files with 7 additions and 1 deletions

View File

@ -1,6 +1,12 @@
# Xevents # Xevents
A covert event logger for deployment via xss A covert event logger for deployment via xss
## Demonstrate impact ## Demonstrate Impact
When cookies are http only and you can't perform the bog standard cookie theft to ATO, When cookies are http only and you can't perform the bog standard cookie theft to ATO,
xevents provides an easy way to demonstrate impact by enabling an attacker to spy on user actions. xevents provides an easy way to demonstrate impact by enabling an attacker to spy on user actions.
## Victim Tracking
Targets maintain the same numeric identifier accross multiple compromised domains making them easier to profile.
## Configurable
given a set of tag names and events (user specified), Xevents generates and serves a payload that attaches the relevant listners and uses the fetch api to exfiltrate data