XSSing Your Way to Shell