IAST HTTP Exfiltration Sinks

Exercises fetch/XHR/sendBeacon/image.src sinks with tainted data in URL, headers, or body.

URL (tainted)

Headers JSON (tainted) Body (tainted)

Choose which source to prime before triggering sinks.

URL query (?url=...) URL hash document.cookie localStorage sessionStorage window.name input only

Taint is pulled from ?url=..., ?body=..., or the fields above when you click "Prime taint sources".

IAST Client HTTP Exfiltration Module