Website Search

Enter a target to scan for local storage.

Input Enter a specific URL or IP address for investigation.

Operation We'll dispatch a request to the designated target and retrieve all storage key-value pairs.

Result You'll be presented with a list of local storage key-value pairs that the website sets.

API Overview | 1,000 free daily requests

Make a HTTP POST request (content-type application/json) to https://srcport.com/api/free/[module]

POST

Add a Authorization: Bearer [token] header to the request including your personal API token viewable in your account profile.

Header

The HTTP POST request payload should contain a JSON formatted prompt and options field. The prompt field is typically the target of the scan, e.g., 'example.com'. The buttons below can be used to view the available options.

The prompt is the main searchterm provided to the tool. This needs to be in a format required by the tool otherwise an error may be returned. For example some tools may require URLs while others may require IP addresses.

Some options may be required while others are optional. If there are no options, an empty object should be provided.

The default API key is provided as an example only. This will not work in your own applications. Register for a free account to get an API key.

Example CURL Request

Local Storage

The local storage scanner is used to retrieve the local storage key-value pairs from a browser. This can be used to extract sensitive information such as API keys, session tokens, and more.

Wait For Idle - You can wait for a period of idle network connections before resolving the page. This can be useful for pages that load content dynamically but slows down scanning.

No Wait 2 Seconds 5 Seconds 10 Seconds

Low Risk Local Storage

Local Storage

Local storage is a web browser feature that allows websites to store data persistently on a user's device. Local storage can be exploited by cyber attackers through techniques like cross-site scripting (XSS) to steal or manipulate stored data, which might contain sensitive information such as user preferences, authentication tokens, or personal details, thereby posing a significant cybersecurity risk.

JavaScript

Local storage is often set by JavaScript, specifically Ajax requests that run after the page body has fully loaded. The Idle option allows you to wait a specified period of time for the network to go quiet before checking for local storage key-value pairs.