I can't wait to know how you plan to bypass a strict Content-Security-Policy. CSP is a pain to configure, but it's 100% worth it. You can also use Content-Security-Policy-Report-Only until you get it right. Then you just swap it for Content-Security-Policy.
Really cant figure out the cretificates and keys. Searched for apache installs and kali installs, made keys with certbot and made keys with letsenrypt, copied keys from sites copied certificates and nothing works. Whys it so hard 😭
BeEF has a great GUI, you can use it to manage your hooked browsers and execute scripts from a dynamic library of exploits, which is super cool. Toxssin from the other hand aims to poison the most sensitive elements of a webpage (inputs, forms, links, keystrokes etc) as fast as possible, steal data and send them back to the attacker while maintaining XSS persistence.
