The XSS Rat
CWAP · Module 03 — Recon & Mapping

Recon 2 — content and endpoint discovery

Animated, step-by-step: robots and history → soft-404 calibration → filtered fuzzing → recursion → JS and schemas → an endpoint inventory.
Module 03Content discoveryffufUnlinked routes
—

—

—

◤ Attacker workstation

🐀
you
idle
—

◤ On the wire

◤ Server

key material
—
waiting
attacker
server
hunter@cwap — bash
1× 0:00 / 0:00 step 1 / 1