As an open source penetration testing tool, IPTC-Attacker allows to create an image with IPTC metadata containing testing vectors for Cross-Site Scripting attacks. Each checkbox can be used to include a huge collection of payloads into the selected tags (HTML5sec, XSS Cheat Sheet). If a checkbox will be not selected, the string aaa'bbb"ccc<ddd is automatically included into the unchecked IPTC tag.
Therefore, testing for XSS vulnerabilities via IPTC metadata is possible by looking into the source code of the attacked Web application; strictly speaking for aaa'bbb"ccc<ddd or alternatively by verifying if, for example, alert-windows appear due to the XSS vector collection.
Features
- Generate JPG images with IPTC metadata
- Huge collection of XSS vectors
- Easy to use: Generate the image, upload it to your image provider, and verify if the input if filtered
Project Samples
Other Useful Business Software
Zenflow- The AI Workflow Engine for Software Devs
Zenflow is the AI workflow engine built for real teams. Parallel agents plan, code, test, and verify in one workflow. With spec-driven development and deep context, Zenflow turns requirements into production-ready output so teams ship faster and stay in flow.
Rate This Project
Login To Rate This Project
User Reviews
Be the first to post a review of IPTC-Attacker!
