The XSS Rat
CWAP · Module 02 — Pentest Planning

Writing the scope before you touch anything

Animated, step-by-step: in and out of scope named explicitly, destructive and data-handling rules, escalation and abort criteria — and the machine-readable scope file you gate every command through.
Module 02ScopingAuto-fail zoneGraded above exploits

◤ Attacker workstation

🐀
you
idle

◤ On the wire

◤ Server

key material
waiting
attacker
server
hunter@cwap — bash
0:00 / 0:00 step 1 / 1