XSS

• Session hijacking / Cookie theft. Steal cookie to get admin privilege

• use xsser tool

• Using BEEF

• Enumeration user input box