Pwning with XSS: from alert() to reverse shell: Defcon Banglore 2013
Report
Ajin AbrahamFollow
Security Engineer | Freelance Security Consultant | Speaker at IMMUNIOAug. 20, 2013•0 likes•10,293 views
Pwning with XSS: from alert() to reverse shell: Defcon Banglore 2013
Aug. 20, 2013•0 likes•10,293 views
Download to read offline
Report
Technology
A Glimpse through V4 of OWASP Xenotix XSS Exploit Framework
Ajin AbrahamFollow
Security Engineer | Freelance Security Consultant | Speaker at IMMUNIO
More Related Content
More from Ajin Abraham
Injecting Security into Web apps at Runtime WhitepaperAjin Abraham
Injecting Security into vulnerable web apps at RuntimeAjin Abraham
AppSec EU 2016: Automated Mobile Application Security Assessment with MobSFAjin Abraham
Nullcon Goa 2016 - Automated Mobile Application Security Testing with Mobile ...Ajin Abraham
Automated Security Analysis of Android & iOS Applications with Mobile Securit...Ajin Abraham
G4H Webcast: Automated Security Analysis of Mobile Applications with Mobile S...Ajin Abraham
Recently uploaded
NTGapps DTB Platform.pdfMustafa Kuğu
OpenFOAM benchmark for EPYC server: cavity mediumtakuyayamamoto1800
Sell&Buy.pdfDanielle95109
Diogo Monteiro- KAMK Certificate - Demola Global Project 2023.pdfDiogoMonteiro786960
FewShotExamples.pptxAlok Ranjan
Testing and Developing GraphQL APIsPostman
Pwning with XSS: from alert() to reverse shell: Defcon Banglore 2013
- • • • •
- START
- Xenotix HTTP Web Shell Proxy Web Server ATTACKER VICTIM GET http://facebook.com Serve the JavaScript File Facebook.com HTML page contents FB’s Server
- SO.... Never Under Estimate the Power of XSS
- ajinabrahamofficial ajinabrahamofficial ajinabraham ajinabraham ajin.abraham@owasp.org