Public Repository

Last pushed: 2 years ago
Short Description
A small tool to create media files with custom metadata to test services for XSS vulnerabilities.
Full Description


With this small suite of open source pentesting tools you're able to create an image (.jpg),
audio (.mp3) or video (.mp4) file containing your custom metadata or a set of cross-site scripting
vectors to test any webservice against possible XSS vulnerabilities when displaying unfiltered meta data.

Installation / Usage

First install docker on your host system.

Now you can simply run the following command:

sudo docker run -p 80:80 --name metadta-attacker --rm lednerb/metadata-attacker

When finished open your favorite browser and switch to the docker ip or http://localhost


  • Image-Attacker developed by @mniemietz
  • Audio-Attacker developed by @derctwr
  • Video-Attacker, project merging and docker containers by @Lednerb
Docker Pull Command