From: Marco Ivaldi (raptormediaservice.net)
Date: Fri Oct 10 2008 - 04:13:20 CDT

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

On Thu, 9 Oct 2008, natron wrote:

> XSS-Proxy allows you to turn an XSS hole into a proxy to surf from the
> users perspective, with some limitations. Will need modification to
> be useful for anything other than a demo.
>
> http://xss-proxy.sourceforge.net/

See also XSS Shell and XSS Tunnel, at:

http://www.portcullis-security.com/16.php
http://www.portcullis-security.com/uplds/whitepapers/XSSTunnelling.pdf
http://ferruh.mavituna.com/blogs/xsstunnelling-video.zip

BeEF, the Browser Exploitation Framework, may also be useful:

http://www.bindshell.net/tools/beef/

--
Marco Ivaldi, OPST
Red Team Coordinator Data Security Division
Mediaservice.net Srl http://mediaservice.net/

------------------------------------------------------------------------
This list is sponsored by: Cenzic

Security Trends Report from Cenzic
Stay Ahead of the Hacker Curve!
Get the latest Q2 2008 Trends Report now

www.cenzic.com/landing/trends-report
------------------------------------------------------------------------

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]