Repository files navigation

• From XSS to RCE 2.75 - Black Hat Europe Arsenal 2017

• Version 2.0 - 2015:https://www.youtube.com/playlist?list=PLIjb28IYMQgqqqApoGRCZ_O40vP-eKsgf
• Version 2.5 - 2016:https://www.youtube.com/playlist?list=PLRic6PgcrsWGkgacL6WFnSQKVRZIoofRj
• Version 2.75 - 2017: None Currently Available

• Python (2.7.*, version2.7.14 was used for development and testing)
• Msfconsole (accessible via environment variables)
• Netcat (nc)
• PyGame (pip install pygame)
• jsmin (new dependency - pip install jsmin)
• xterm (previously gnome and bash)

To install the Python dependencies, you can run the following command:

pip install -r requirements.txt

If you're using a virtual environment, then you may need to use the full list:

pip install -r requirements-all-libraries-used.txt

For installation instructions on Ubuntu 16.04.1 LTS, please refer to the wiki:https://github.com/Varbaek/xsser/wiki

• Gnome (switched to xterm)
• Bash (only tested in bash, but should work in other terminals)
• cURL (switched to native python requests)

• Chrome (2018) - Tested live at Black Hat Arsenal 2017 and during extras development.
• Firefox - Untested - Should still work as available JS features are almost the same.

• WordPresshttp://wordpress.org/
• Better WP Security 3.5.3http://www.exploit-db.com/wp-content/themes/exploit/applications/c6d6beb3c11bc58856e15218d512b851-better-wp-security.3.5.3.zip
• Optional: WPSEOhttps://yoast.com/wordpress/plugins/seo/

• http://www.exploit-db.com/exploits/27290/

• Joomlahttps://www.joomla.org/
• SecurityCheck 2.8.9https://www.exploit-db.com/apps/543ccd00b06d24be139d7e18212a0916-com_securitycheck_j3x-2.8.9.zip

• https://www.exploit-db.com/exploits/39879/

• Audio: Contains remixed audio notifications.
• Exploits: Contains DirtyCow (DCOW) privilege escalation exploits.
• Hello_Shell: Contains a Joomla extension backdoor, which can be uploaded as an administrator andsubsequently used to execute arbitrary commands on the system with ?c=ls or ?c64=base64_here.This directory was originally placed in "Joomla_Backdoor".
• Payloads/#"auto">

  Developed By

Special Credits

Code Design