Skip to main content

XSSF (Cross-Site Scripting Framework )

-----------------------------­-------------------
The Cross-Site Scripting Framework (XSSF) is a security tool designed to turn the XSS vulnerability exploitation task into a much easier work. The XSSF project aims to demonstrate the real dangers of XSS vulnerabilities, vulgarizing their exploitation. This project is created solely for education, penetration testing and lawful research purposes.
XSSF allows creating a communication channel with the targeted browser (from a XSS vulnerability) in order to perform further attacks. Users are free to select existing modules (a module = an attack) in order to target specific browsers.
XSSF provides a powerfull documented API, which facilitates development of modules and attacks. In addition, its integration into the Metasploit Framework allows users to launch MSF browser based exploit easilly from an XSS vulnerability.

In addition, an interesting though exploiting an XSS inside a victim’s browser could be to browse website on attacker’s browser, using the connected victim’s session. In most of cases, simply stealing the victim cookie will be sufficient to realize this action. But in minority of cases (intranets, network tools portals, etc.), cookie won’t be useful for an external attacker. That’s why XSSF Tunnel was created to help the attacker to help the attacker browsing on affected domain using the victim’s session

Comments

Popular posts from this blog

Physical Teleportation Theoretical method to do It!

Teleportation is the ability of moving matter from one point in time and space to another point in time and space instantaneously. There are different types of teleportation available at this time both visual and physical teleportation are possible and we use visual teleportation as our starting point. Types Visual body teleportation Astral body teleportation The different types of visual teleportation are. visual body or astral body teleportation , or visual object teleportation but before we can master teleportation we must first learn the art of Telekinesis/Psychokinesis and Clairsentience and the higher state of consciousness the seventh sense. Other abilities useful in teleportation are Tele-Visualization and ESP (Extrasensory Perception). The ability of teleportation is used in Time travel, Interstellar travel, and Dimensional travel. Teleportation is the near instantaneous transport of the Psychic from one location to another and there is no other fo...

Guitar : Scale And Its Link To The Chords With A minor Pentatonic scale

Guitar : Scale And Its Link To The Chords With A minor Pentatonic scale we will learn the following things: 01. What is a scale?  Some basic theory on scales and the notes in them... You will have to wait for Part II (novice) for the whole story though! 02. How scales relate to chords:  why one scale can be used to solo over a certain chord progression, and another scale can't! 03. The A Minor Pentatonic scale:  an easy example of a scale that you are going to use for soloing! OK! Let's get going for your first lesson in improvisation and soloing!

Convert ARF to MP4, WMV, MP3 with ARF Converter

Convert ARF to MP4, WMV, MP3 with ARF Converter Need to convert ARF to MP4, convert ARF to WMV, MP3? ARF Converter can help easily convert ARF files. Get your ARF File Converter to open and play ARF files now. ARF, standing for “advanced recording file”, is a file extension for a WebEx advanced recording file from a network-based recording. An ARF file contains the video data, a table of contents, an attendee list, and other information on separate panels. The ARF file extension is for recordings downloaded by the user. The ARF file extension is also used for automatic response files. The *.arf files are WebEx recordings directly downloaded by the user. However, we often meet problems when open or play ARF files. Why? Because the incompatibility of ARF file is not so good. To solve the compatibility and open or play ARF files with zone problems, it is nice to convert ARF to MP4, convert ARF to WMV, MP3 or other common video and audio formats. What Kind of ARF Converter or ARF Player Ca...