XSS Tunnelling

[Nytro]

XSS Tunnelling

Tunnelling HTTP traffic through XSS Channels

Ferruh Mavituna

www.portcullis-security.com

XSS Tunnelling ................................................................................................................1
About XSS Tunnelling..................................................................................................1
What Is An XSS Channel?........................................................................................... 2
How Does XSS Shell Work?........................................................................................ 2
Points of Interest ..................................................................................................... 4
Why Is It Better Than The Classic XSS Attacks?.................................................... 5
What Is XSS Tunnelling?................................................................................................ 5
What Is An XSS Tunnel? ................................................................................................ 5
Why Tunnel HTTP Traffic Through An XSS Channel? ................................................. 6
Benefits Of XSS Tunnelling............................................................................................ 7
How Does XSS Tunnel Work?........................................................................................8
An Attack Process ....................................................................................................... 9

Download:

http://labs.portcullis.co.uk/download/XSS-Tunnelling.pdf