The Secure Socket Tunneling Protocol is a VPN protocol developed by Microsoft. It sends traffic over an SSL version 3 connection.

Since SSlv3 is vulnerable to the POODLE attack, does this mean that SSTP trafic is vulerable? This answer says that:


  The main and about only plausible scenario where [the conditions
  required for the attack] are met is a Web context


but would this include web browsing over an SSTP VPN?

Try this:

" onfocus="alert(1)" autofocus="


It will expand to:

<input type="text" id="search-text" name="query" value="" onfocus="alert(1)" autofocus="" />


Which will cause an alert box, demonstrating XSS.
