IAST Storage Token Leaks

Triggers storage sinks (localStorage, sessionStorage, document.cookie) with tainted values.

Token / sensitive value (tainted)

Choose which source to prime for the storage value.

URL query (?token=...) URL hash document.cookie localStorage sessionStorage window.name input only

Taint is read from ?token=... or the input when you click "Prime taint sources".

IAST Storage Token Leaks Module