Login Register
The stories and information posted here are artistic works of fiction and falsehood. Only a fool would take anything posted here as fact.


Steal cookies using XSS filter_list
Author
Message
RE: Steal cookies using XSS #11
(12-23-2013, 02:24 AM)godtheonlytruth Wrote:
Code:
nc -lvp 4444
doesn't work as -p can not be used with -l as stated by nc man page.
Code:
nc -lv 4444
instead works well.
Thanks for the tut though Smile

-lvp Works like a charm here, but I understand your point. Even better solution would be -lvk so that you can watch all incoming cookies instead of just the first one
"SQL Injection-a-holic"

Twitter | Security Sucks | My Blog

Reply

RE: Steal cookies using XSS #12
@shp0ngl3
Ok I see -lvp is working on your machine but it did not work for me. I was using centos. Its output pasted below
Code:
$ nc -lvp 4444 usage: nc [-46DdhklnrStUuvzC] [-i interval] [-p source_port] [-s source_ip_address] [-T ToS] [-w timeout] [-X proxy_version] [-x proxy_address[:Smile:port]] [hostname] [port[s]]


When I just tested it on backbox it told the story that by default it uses netcat-openbsd package where -lvp does not work.
Code:
$ nc -lvp 4444 This is nc from the netcat-openbsd package. An alternative nc is available in the netcat-traditional package. usage: nc [-46DdhklnrStUuvzC] [-i interval] [-P proxy_username] [-p source_port] [-s source_ip_address] [-T ToS] [-w timeout] [-X proxy_protocol] [-x proxy_address[:port]] [hostname] [port[s]]



When I executed nc traditional then it really worked like a charm :Smile:
Code:
$ /bin/nc.traditional -lvp 4444 listening on [any] 4444 ...

Anyways thanks a lot brother, your tutorial is helpful and motivating :Smile:

Reply

RE: Steal cookies using XSS #13
(12-23-2013, 10:50 AM)godtheonlytruth Wrote: @shp0ngl3
Ok I see -lvp is working on your machine but it did not work for me. I was using centos. Its output pasted below
Code:
$ nc -lvp 4444 usage: nc [-46DdhklnrStUuvzC] [-i interval] [-p source_port] [-s source_ip_address] [-T ToS] [-w timeout] [-X proxy_version] [-x proxy_address[:Smile:port]] [hostname] [port[s]]


When I just tested it on backbox it told the story that by default it uses netcat-openbsd package where -lvp does not work.
Code:
$ nc -lvp 4444 This is nc from the netcat-openbsd package. An alternative nc is available in the netcat-traditional package. usage: nc [-46DdhklnrStUuvzC] [-i interval] [-P proxy_username] [-p source_port] [-s source_ip_address] [-T ToS] [-w timeout] [-X proxy_protocol] [-x proxy_address[:port]] [hostname] [port[s]]



When I executed nc traditional then it really worked like a charm :Smile:
Code:
$ /bin/nc.traditional -lvp 4444 listening on [any] 4444 ...

Anyways thanks a lot brother, your tutorial is helpful and motivating :Smile:

Thanks for clearing it up Smile I will change the OP. Glad you found it helpful
"SQL Injection-a-holic"

Twitter | Security Sucks | My Blog

Reply

RE: Steal cookies using XSS #14
You forgot to remove -p from last code snippet :Smile:

Reply

RE: Steal cookies using XSS #15
(12-23-2013, 06:40 PM)godtheonlytruth Wrote: You forgot to remove -p from last code snippet :Smile:

Lol thanks for the heads up Biggrin
"SQL Injection-a-holic"

Twitter | Security Sucks | My Blog

Reply







Users browsing this thread: 1 Guest(s)