The Cross-Site Scripting Framework (XSSF) is security tool designed to turn the XSS vulnerability exploitation task.XSSF allows creating a communication channel with the targeted browser (XSS vulnerability) in order to perform further attacks. Users are free to select existing modules (a module = an attack) in order to target specific browsers.XSSF provides a powerful documented API, which facilitates development of modules and attacks. In addition, its integration into the Metasploit Framework allows users to launch MSF browser based exploit easily from XSS vulnerability.
How to Configure :
1 - kali Linux terminal and type cd /opt/metasploit/apps/pro/msf3
2 - In msf3 install xssf using following command
Svn export http://xssf.googlecode.com/svn/trunk ./ --force
3 - Load XSSF plugin using the command - load xssf
VIDEO :



