Infrastructure fingerprinting via XSS

Yokoso! is an infrastructure fingerprinting system delivered via XSS attack. This project contains two different parts; the fingerprints and modules for the various browser exploit frameworks.

The fingerprints identify web applications deployed in the user's network, applications such as web administration interfaces to different IT manage systems.

The modules portion contains code to perform two basic attacks. The first is history browsing which determines if the user has visited the sites of interest. This reveals if the user is an administrator or power user. The second attack module within Yokoso! Initiates requests to map the infrastructure of the user's network.

Download Yokoso

Source: net-security.org