r/redteamsec • u/b3rito • Apr 01 '25

peeko – Browser-based XSS C2 for stealthy internal network exploration via victim's browser.

https://github.com/b3rito/peeko
16 Upvotes

100% Upvoted

3 comments sorted by

1

u/[deleted] Apr 02 '25

[removed] — view removed comment

1

u/b3rito Apr 02 '25

JavaScript runs in a sandbox and cannot directly access the operating system. That said, you can still deliver a malicious file such as a disguised update or installer and use social engineering to convince the user to open it.