‘XSS Tunneling White Paper and Tool’

Summary

Credit:

‘The information has been provided by Ferruh Mavituna.
The original article can be found at: http://www.portcullis-security.com/16.php


Details

‘XSS Tunneling is the tunneling of HTTP traffic through an opened XSS Channel. Thus any application with HTTP proxy support can tunnel its traffic through an XSS Channel (a channel opened by a tool like XSS Shell).

White paper is explaining XSS Tunneling, benefits, real worlds examples and basic usage of XSS Tunnel (a local HTTP proxy for tunneling) tool.

XSS Tunneling Paper:
http://www.portcullis-security.com/uplds/whitepapers/XSSTunnelling.pdf

A Short Demonstration Video:
http://ferruh.mavituna.com/blogs/xsstunnelling-video.zip

Video shows to exploit a permanent XSS in wordpress and bypass Basic Auth on the fly by XSS Tunnel.’

Categories: Tools