IAST Realtime Exfiltration Module

Covers WebSocket.send and RTCDataChannel.send sinks. The payload is tainted and forwarded across the respective APIs.

Payload message WebSocket endpoint

Choose which source to prime for the message.

URL query (?message=...) URL hash document.cookie localStorage sessionStorage window.name input only

Taint is pulled from ?message=..., hash fragments, or these fields when primed.

WebSocket attempts to send after connect (or immediately on error). RTC uses a loopback peer-connection so the channel reaches "open".