JS-Tap v3: Endpoint Post-Exploitation With JavaScript Implants

**JS-Tap v3** is a JavaScript-based post-exploitation toolkit that extends a DOM XSS beacon into three new beacon types: a browser-extension (BEX) that can capture httpOnly cookies and inject DOM beacons, an Electron implant (Atom) that patches app ASARs to gain native OS access and application-specific data (plugins for VS Code, 1Password, Signal, Slack, Mattermost), and a Node/Bun CLI implant (V8) loaded via runtime options to intercept CLI tools and AI assistants. All beacons support network proxying to access internal resources, session cloning via a Conductor extension, and tooling for red-team engagements, but the described capabilities enable high-risk data theft and remote access if abused.