Hacking to Windows 7 fully patched client using Xssf and Metasploit with injected JavaScript and java applet ,tunneling traffic to hijack user session

attacker can use persistent xss , and for non persistent xss attacker can use shorten url ,

but that need to stick the victim in a website for a while .

 *this tutorial is limited *

*tutorial by : noizepulse *