The XSS Rat
CWAP · Module 03 — Recon & Mapping

Recon 3 — authentication, roles and the two-account matrix

Animated, step-by-step: auth flows → two accounts in two jars → sessions and claims → the endpoint × role sweep → the matrix module 04 attacks.
Module 03Roles & sessionsTwo accountsFeeds module 04
—

—

—

◤ Attacker workstation

🐀
you
idle
—

◤ On the wire

◤ Server

key material
—
waiting
attacker
server
hunter@cwap — bash
1× 0:00 / 0:00 step 1 / 1