The XSS Rat
CWAP · Module 01 — OWASP WSTG

Working a WSTG category end to end

Animated, step-by-step: WSTG-ATHZ executed against one target — signal order, credible negatives, a time-boxed partial, and the ID travelling into the finding.
Module 01WSTG-ATHZEvidenceCoverage claim
—

—

—

◤ Attacker workstation

🐀
you
idle
—

◤ On the wire

◤ Server

key material
—
waiting
attacker
server
hunter@cwap — bash
1× 0:00 / 0:00 step 1 / 1