The XSS Rat
CWAP · Module 12 — Vulnerability Chaining

Chain 1 — three Low findings become one Critical

Animated, step-by-step: an information leak, an IDOR and a weak function-level check, drawn as a graph and walked from anonymous to administrator.
Module 12ChainingEntry → Pivot → ImpactCritical
—

—

—

◤ Attacker workstation

🐀
you
idle
—

◤ On the wire

◤ Server

key material
—
waiting
attacker
server
hunter@cwap — bash
1× 0:00 / 0:00 step 1 / 1