Chain Xss To Takeover

Build chains from XSS into account takeover or privileged action execution.

purpleailab Updated

File contents

Chain: XSS to Takeover

Canonical path

  1. Confirm script execution in victim context.
  2. Steal session/CSRF token or trigger privileged action.
  3. Use stolen material to access victim/admin account.
  4. Demonstrate durable account impact.

Validation

Include both browser-side evidence and server-side action confirmation.

purpleailab/decepticon/tree/main/packages/decepticon/decepticon/skills/standard/analyst/chains/xss-to-takeover commit 1c150ba55e

Frequently asked questions

npx skillmds@latest add purpleailab/chain-xss-to-takeover