Search



Categories

News

Videos

Underground

Vblogs

Hacking Challenges

Episode 21 – XSS Tunnel

August 22nd, 2008 by Patchy
XSS Shell is a cross-site scripting backdoor into the victim’s browser which enables an attacker to issue commands and receive responses. During a normal XSS attack an attacker only has one chance to control a victim’s browser; however, the XSS Shell keeps the connection between the attacker and the victim open to allow the attacker to continuously manipulate the victim’s browser. XSS Shell works by setting up an XSS Channel, an AJAX application embedded into the victim’s browser, that can obtain commands and send back responses. To enable the XSS Shell an attacker needs to inject the XSS Shell’s Javascript reference by utilizing a XSS flaw on a website. Once the victim’s browser is infected with the XSS Shell and the XSS Channel is created, the attacker can issue instructions to the infected browser. Also, the Attacker can use a XSS Tunnel to transfer HTTP traffic through the XSS Channel and the victim’s browser; in turn, exploiting the victim’s credentials to bypass authentications and IP Restrictions. The XSS Tunnel is a HTTP Proxy that sits on an attacker’s computer, and any tool that is configured to use it will tunnel its traffic through the XSS Channel.

Live Stream Here
Download Here

Download XSS Shell and Tunnel

Posted in Videos | 9 Comments »

9 Responses

  1. hackers-era.com Says:

    Nice video

  2. CrashOverron Says:

    downloading it now =P should be pretty neat

  3. austin Says:

    Amazing video Patchy & Nox. This will be very useful :)

  4. excid3 Says:

    great work guys, keep it up!

  5. Hüseyin - XSS Shell and XSS Tunnel Video Says:

    [...] Infinity Exists released a new episode [...]

  6. FaTaLeRrOr Says:

    Nice video

  7. iS34.Net Güncel Haberler » XSS Shell and XSS Tunnel Video Says:

    [...] Infinity Exists released a new episode which shows how to setup and use XSS Shell and XSS Tunnel.  It explains how to download, setup and attack with XSS Shell / Tunnel. If you want to learn how to use it, having problems or just want to take a look at it, watch episode 21 – XSS Tunnel. [...]

  8. XSS Shell and XSS Tunnel Video | RebelFa1con™ Says:

    [...] Infinity Exists released a new episode which shows how to setup and use XSS Shell and XSS Tunnel.  It explains how to download, setup and attack with XSS Shell / Tunnel. If you want to learn how to use it, having problems or just want to take a look at it, watch episode 21 – XSS Tunnel. [...]

  9. RebelFa1con™ » XSS Shell and XSS Tunnel Video Says:

    [...] Infinity Exists released a new episode which shows how to setup and use XSS Shell and XSS Tunnel.  It explains how to download, setup and attack with XSS Shell / Tunnel. If you want to learn how to use it, having problems or just want to take a look at it, watch episode 21 – XSS Tunnel. [...]

You must be logged in to leave a comment.