The XSS Rat
CWAP · Module 06 — Blind XSS

Blind XSS — Standing up the listener and spraying every input

Animated, step-by-step: build the out-of-band collector, forge a tagged remote-loader payload, and seed every field, header and filename the app will store.
Module 06Blind XSSOOBHigh
—

—

—

◤ Attacker workstation

🐀
you
idle
—

◤ On the wire

◤ Server

key material
—
waiting
attacker
server
hunter@cwap — bash
1× 0:00 / 0:00 step 1 / 1