Window Redress

[Miserlou]

This one, combined with #12 , is a really big one. Replace the current DOM content with the contents of another page and change the URL bar's contents and favicon. That way, you can replace the contents of '/dash' with the contents of '/login' and capture the resulting keystrokes. This is why XSS still rules.

Again, source example: https://github.com/Miserlou/XSS-Harvest

[mandatoryprogrammer]

There is a new version of XSS Hunter (e.g. v2) actively being developed which will actually have a module system for adding modules such as this. Stay tuned!

[thryb]

Can't wait :)