Locked Self-XSS - Self-XSS Attack

[itsMe]

This is the hidden content, please

• Sign In
• or
• Sign Up

Self-XSS - Self-XSS Attack Using Bit.Ly To Grab Cookies Tricking Users Into Running Malicious Code

How it works?

Self-XSS is a social engineering attack used to gain control of victims' web accounts by tricking users into copying and pasting malicious content into their browsers. Since Web browser vendors and web sites have taken steps to mitigate this attack by blocking pasting javascript tag, I figure out a way of doing that using Bit.ly, so we can create a redirect pointing to "website.com/javascript:malicious_code". If the user is tricked to run the javascript code after "website.com/" the cookies of its authenticated/logged session of website.com will be sent to the attacker.

Features:

Port Forwarding using Ngrok and shortner using Bitly.com (Register for free)

This is the hidden content, please

• Sign In
• or
• Sign Up