GitHub repository: michalkoczwara/HttpPwnly
Primary language: HTML
Description: "Repeater" style XSS post-exploitation tool for mass browser control. Primarily a PoC to show why HttpOnly flag isn't a complete protection against session hijacking via XSS