[noober1001]

Thanks for sharing this.
I will definitely try this.

[TinyWing]

This is one of the best tuts. Thank you.

[skatetopia]

Is this for LAN only?

[T00SH0RT...]

[Stenography]

Looks very interesting..
Going to try it out..

[Delete Me]

This is nice man! I didn't know XSS could be this usefull. I just found a big forum vulnerable to XSS.
Definitely going to try this out...right know! And checking your other tuts.

Thanks!

[rand0]

Awesome share. I will most certainly get into this when I actually get more time to hack. I'm uber impressed by your 1337ness sir. Keep up the good work. Bookmarked :)

[orunu]

i just got one question :/ how does a victim become "active"?

[orunu]

by visiting a page where you have injected your XSSF link into. Might be persistent or not. You can use whatever syntax works on your particular site but it needs to point to the URL provided at XSSF startup (or if you check). Once a visitor visits the malicious link or injected page their browser will be hooked. Once hooked you can have fun doing what you want. You can use the test page that gets setup at load time to test how things work and how the hook makes a target become active. Hope this helps.

yea i found out i could use a hidden iframe with a link to the testpage and have auto attack setup = pwned

and im using no-ip.biz instead of my external ip :) safer that way lol

[matt_]

Awesome demo on this. Not really something i've looked into before but this has caught my attention now. Thanks.

[Greyersting]

I am getting uninitialized constant msf:xssf
What does that mean?

[DΛЯK 0DIП]

Great tut however:

Secondly - run your choice method of opening MSF
[*]Armitage or ./msfconsole

It is recommended by Rapid 7 to just run armitage or msfconsole from a terminal, and not from the directory.

[fred goffa]

Hey dude nice tut, but next time can u please show hacking external ip, not a local ip please, because it drives me crazzy when people say they can hack in videos, but when doing it over lan prooves nothing, all lan hacking proovs is ur a script kiddie :\

[DΛЯK 0DIП]

but when doing it over lan prooves nothing, all lan hacking proovs is ur a script kiddie :\

This is one of the most ignorant statements I have ever heard.

[Vikta_]

Great tutorial. Going to bookmark this for later use ;-)

[fred goffa]

Gives me negative rep for making that post

DΛЯK 0DIП (41) - Last updated Today, 01:02 AM

Negative (-3): 'when doing it over lan prooves nothing, all lan hacking proovs is ur a script kiddie :\' LQ member, knows nothing.

Hmmm someone is mad