Pwning with XSS: from alert() to reverse shell: Defcon Banglore 2013

•Download as PPTX, PDF•

5 likes•10,299 views

Ajin Abraham

A Glimpse through V4 of OWASP Xenotix XSS Exploit Framework

Technology

Xenotix HTTP Web Shell
Proxy
Web Server
ATTACKER
VICTIM
GET http://facebook.com
Serve the
JavaScript
File
Facebook.com HTML page contents
FB’s
Server

SO....
Never Under Estimate
the Power of XSS

ajinabrahamofficial
ajinabrahamofficial
ajinabraham
ajinabraham
ajin.abraham@owasp.org

Recently uploaded

Bun (KitWorks Team Study 노별마루 발표 2024.4.22)Wonjun Hwang

WordPress Websites for Engineers: Elevate Your Brandgvaughan

"Debugging python applications inside k8s environment", Andrii SoldatenkoFwdays

DevoxxFR 2024 Reproducible Builds with Apache MavenHervé Boutemy

E-Vehicle_Hacking_by_Parul Sharma_null_owasp.pptxnull - The Open Security Community

Search Engine Optimization SEO PDF for 2024.pdfRankYa

The Future of Software Development - Devin AI Innovative Approach.pdfSeasiaInfotech2

AI as an Interface for Commercial BuildingsMemoori

Gen AI in Business - Global Trends Report 2024.pdfAddepto

Integration and Automation in Practice: CI/CD in Mule Integration and Automat...Patryk Bandurski

Install Stable Diffusion in windows machinePadma Pradeep

Kotlin Multiplatform & Compose Multiplatform - Starter kit for pragmaticscarlostorres15106

Leverage Zilliz Serverless - Up to 50X Saving for Your Vector Storage CostZilliz

"Federated learning: out of reach no matter how close",Oleksandr LapshynFwdays

Anypoint Exchange: It’s Not Just a Repo!Manik S Magar

Story boards and shot lists for my a level piececharlottematthew16

Training state-of-the-art general text embeddingZilliz

"LLMs for Python Engineers: Advanced Data Analysis and Semantic Kernel",Oleks...Fwdays

"ML in Production",Oleksandr BaganFwdays

Connect Wave/ connectwave Pitch Deck PresentationSlibray Presentation

Recently uploaded (20)

Bun (KitWorks Team Study 노별마루 발표 2024.4.22)

WordPress Websites for Engineers: Elevate Your Brand

"Debugging python applications inside k8s environment", Andrii Soldatenko

DevoxxFR 2024 Reproducible Builds with Apache Maven

E-Vehicle_Hacking_by_Parul Sharma_null_owasp.pptx

Search Engine Optimization SEO PDF for 2024.pdf

The Future of Software Development - Devin AI Innovative Approach.pdf

AI as an Interface for Commercial Buildings

Gen AI in Business - Global Trends Report 2024.pdf

Integration and Automation in Practice: CI/CD in Mule Integration and Automat...

Install Stable Diffusion in windows machine

Kotlin Multiplatform & Compose Multiplatform - Starter kit for pragmatics

Leverage Zilliz Serverless - Up to 50X Saving for Your Vector Storage Cost

"Federated learning: out of reach no matter how close",Oleksandr Lapshyn

Anypoint Exchange: It’s Not Just a Repo!

Story boards and shot lists for my a level piece

Training state-of-the-art general text embedding

"LLMs for Python Engineers: Advanced Data Analysis and Semantic Kernel",Oleks...

"ML in Production",Oleksandr Bagan

Connect Wave/ connectwave Pitch Deck Presentation