In this tutorial is based in literature and tools widely available in the Internet, we did perform all the steps by ourselves, hope useful, 1. Introduction 2. Firefox configuration 3. bWAPP Cookie Interception by Burp Suite 4. Attack with Commix to Establish a Shell