Collected research

XSS-Track: How to quietly track a whole website through single XSS

One XSS on one page is turned into site-wide surveillance. The payload hides the page, opens a full-window borderless iframe on the same origin, and survives navigation because only the iframe reloads. Same-origin access lets its onload handler hook every link and form, log clicks, form values and selected DOM content, and report by XHR or image beacon.

Record

Published by

blog.kotowicz.net

Topic

XSS

In the archive

• Collected in the 2010 research round

Related sources

• XSS-Track

Tags

• xss
• iframe
• javascript
• dom
• info-leak
• same-origin-policy
• ui-redress
• tooling
• owasp-a01-2021
• owasp-a03-2021
• owasp-a04-2021

This page is the archive's own catalogue record. The research is the work of blog.kotowicz.net, first published at the original source. Preserved copies are kept so the citation survives its host; this one was last captured on 10 August 2026.