What are the two methods described in the article for forwarding HTTP requests via JavaScript in the XSS platform?
The article presents synchronous and asynchronous methods. The synchronous approach uses `XMLHttpRequest` with `false` as the async parameter, returning the response immediately. The asynchronous method uses a callback function to handle the response later. Both methods allow the attacker to send a GET/POST request to a target URL from the victim's browser and exfiltrate the response back to the XSS platform's '/data' endpoint. For a deeper understanding of HTTP request handling, see related discussions in Penetration Basics - Command Line Implementation for Reading Exchange Emails via OWA.
XMLHttpRequestsynchronousasynchronouscallbackHTTP forwarding