Sinisterly
Steal cookies using XSS - Printable Version

+- Sinisterly (https://sinister.ly)
+-- Forum: Hacking (https://sinister.ly/Forum-Hacking)
+--- Forum: Tutorials (https://sinister.ly/Forum-Tutorials)
+--- Thread: Steal cookies using XSS (/Thread-Steal-cookies-using-XSS)

Pages: 1 2


RE: Steal cookies using XSS - RogueCoder - 12-23-2013

(12-23-2013, 02:24 AM)godtheonlytruth Wrote:
Code:
nc -lvp 4444
doesn't work as -p can not be used with -l as stated by nc man page.
Code:
nc -lv 4444
instead works well.
Thanks for the tut though Smile

-lvp Works like a charm here, but I understand your point. Even better solution would be -lvk so that you can watch all incoming cookies instead of just the first one


RE: Steal cookies using XSS - godtheonlytruth - 12-23-2013

@shp0ngl3
Ok I see -lvp is working on your machine but it did not work for me. I was using centos. Its output pasted below
Code:
$ nc -lvp 4444 usage: nc [-46DdhklnrStUuvzC] [-i interval] [-p source_port] [-s source_ip_address] [-T ToS] [-w timeout] [-X proxy_version] [-x proxy_address[:Smile:port]] [hostname] [port[s]]


When I just tested it on backbox it told the story that by default it uses netcat-openbsd package where -lvp does not work.
Code:
$ nc -lvp 4444 This is nc from the netcat-openbsd package. An alternative nc is available in the netcat-traditional package. usage: nc [-46DdhklnrStUuvzC] [-i interval] [-P proxy_username] [-p source_port] [-s source_ip_address] [-T ToS] [-w timeout] [-X proxy_protocol] [-x proxy_address[:port]] [hostname] [port[s]]



When I executed nc traditional then it really worked like a charm :Smile:
Code:
$ /bin/nc.traditional -lvp 4444 listening on [any] 4444 ...

Anyways thanks a lot brother, your tutorial is helpful and motivating :Smile:


RE: Steal cookies using XSS - RogueCoder - 12-23-2013

(12-23-2013, 10:50 AM)godtheonlytruth Wrote: @shp0ngl3
Ok I see -lvp is working on your machine but it did not work for me. I was using centos. Its output pasted below
Code:
$ nc -lvp 4444 usage: nc [-46DdhklnrStUuvzC] [-i interval] [-p source_port] [-s source_ip_address] [-T ToS] [-w timeout] [-X proxy_version] [-x proxy_address[:Smile:port]] [hostname] [port[s]]


When I just tested it on backbox it told the story that by default it uses netcat-openbsd package where -lvp does not work.
Code:
$ nc -lvp 4444 This is nc from the netcat-openbsd package. An alternative nc is available in the netcat-traditional package. usage: nc [-46DdhklnrStUuvzC] [-i interval] [-P proxy_username] [-p source_port] [-s source_ip_address] [-T ToS] [-w timeout] [-X proxy_protocol] [-x proxy_address[:port]] [hostname] [port[s]]



When I executed nc traditional then it really worked like a charm :Smile:
Code:
$ /bin/nc.traditional -lvp 4444 listening on [any] 4444 ...

Anyways thanks a lot brother, your tutorial is helpful and motivating :Smile:

Thanks for clearing it up Smile I will change the OP. Glad you found it helpful


RE: Steal cookies using XSS - godtheonlytruth - 12-23-2013

You forgot to remove -p from last code snippet :Smile:


RE: Steal cookies using XSS - RogueCoder - 12-23-2013

(12-23-2013, 06:40 PM)godtheonlytruth Wrote: You forgot to remove -p from last code snippet :Smile:

Lol thanks for the heads up Biggrin