Choose your payload and server rules to begin.
1. Observe Exploit
2. Encode to Secure
Attacker Phone
Draft Comment
Love this!
App Server
X-Ray Scanner
DATABASE STORAGE
No records
Victim's Feed
A
Alice_88
This is my original post!
BROWSER SESSION (COOKIE)
session_id:
Step 1: Choose Comment
Step 2: Server Security Rules