H3XAOperational intelligence
Live analytical pictureEvidence before assessment
TypeTechnique
External ID—
First seen2026-10-17
Last seen2026-10-17

Confidence

—

Cross Site Tracing (XST) enables an adversary to steal the victim's session cookie and possibly other authentication credentials transmitted in the header of the HTTP request when the victim's browser communicates to a destination system's web server.

Labels

attack-patterncapec
12 recorded

Relationships

child-ofTechnique
related-toVulnerability
related-toVulnerability
related-toVulnerability
related-toVulnerability
related-toVulnerability
related-toVulnerability
related-toVulnerability
related-toVulnerability
related-toVulnerability
related-toVulnerability
related-toVulnerability
1 external

References

capec
CAPEC-107
open