---
id: 8221
title: "ActiveX + XSS = ActiveXSS Pwnage!"
source_domain: netspi.com
source_url: "https://www.netspi.com/blog/technical-blog/web-application-pentesting/activex-xss-activexss-pwnage/"
published_at: "2015-03-05T00:00:00Z"
tags: ["pentesting", "fuzzing", "xss", "activex", "comraider", "client-side-attacks"]
phying_url: "https://phying.com/item/8221"
lang: en
---

# ActiveX + XSS = ActiveXSS Pwnage!

## Summary

After finding XSS in web apps running ActiveX plugins, NetSPI chains the two: extracting class IDs from page HTML, resolving the backing DLL via the registry, and fuzzing it with ComRaider.

## Intelligence Metadata

- **Sources:** netspi.com
- **Published:** 2015-03-05T00:00:00Z
- **Original:** https://www.netspi.com/blog/technical-blog/web-application-pentesting/activex-xss-activexss-pwnage/
- **Phying News:** https://phying.com/item/8221