‘XSS Tunneling White Paper and Tool’



‘The information has been provided by Ferruh Mavituna.
The original article can be found at: http://www.portcullis-security.com/16.php


‘XSS Tunneling is the tunneling of HTTP traffic through an opened XSS Channel. Thus any application with HTTP proxy support can tunnel its traffic through an XSS Channel (a channel opened by a tool like XSS Shell).

White paper is explaining XSS Tunneling, benefits, real worlds examples and basic usage of XSS Tunnel (a local HTTP proxy for tunneling) tool.

XSS Tunneling Paper:

A Short Demonstration Video:

Video shows to exploit a permanent XSS in wordpress and bypass Basic Auth on the fly by XSS Tunnel.’

Categories: Tools