BugTraq
XSS Tunnelling White Paper and Tool Jul 10 2007 09:51PM
Ferruh Mavituna (ferruh mavituna com) (1 replies)
XSS Tunnelling is the tunnelling of HTTP traffic through an opened XSS
Channel. Thus any application with HTTP proxy support can tunnel its
traffic through an XSS Channel (a channel opened by a tool like XSS
Shell).

White paper is explaining XSS Tunnelling, benefits, real worlds
examples and basic usage of XSS Tunnel (a local HTTP proxy for
tunnelling) tool.

XSS Tunelling Paper:
http://www.portcullis-security.com/uplds/whitepapers/XSSTunnelling.pdf

XSS Shell, XSS Tunnel Binary Releases and Source Code:
http://www.portcullis-security.com/16.php

A Short Demonstration Video:
http://ferruh.mavituna.com/blogs/xsstunnelling-video.zip

Video shows to exploit a permanent XSS in wordpress and bypass Basic
Auth on the fly by XSS Tunnel.

Regards,

--
Ferruh Mavituna
http://ferruh.mavituna.com

[ reply ]
Re: XSS Tunnelling White Paper and Tool Jul 11 2007 12:57PM
Security Guy (security sligoinc com)


 

Privacy Statement
Copyright 2010, SecurityFocus