+- Sinisterly (https://sinister.ly)
+-- Forum: Hacking (https://sinister.ly/Forum-Hacking)
+--- Forum: Website & Server Hacking (https://sinister.ly/Forum-Website-Server-Hacking)
+--- Thread: XSS Cookie Stealer Help (/Thread-XSS-Cookie-Stealer-Help)
XSS Cookie Stealer Help - D@rk1433 - 08-02-2015
I am trying XSS 2 challenge in enigmagroup forum. And i saw this
Accepted UA injection, if your cookie stealer is working, check it for cookies.
But i don't know what i do now. And in my hosting site i saw text file empty. Please guide me
RE: XSS Cookie Stealer Help - Satan - 08-02-2015
(08-02-2015, 09:12 AM)D@rk1433 Wrote: I am trying XSS 2 challenge in enigmagroup forum. And i saw this
Accepted UA injection, if your cookie stealer is working, check it for cookies.
But i don't know what i do now. And in my hosting site i saw text file empty. Please guide me
Have you told it which cookie to steal?
Are you sure it isn't httponly?
Did you make it wrong?
Etc. Many reasons why it couldn't be working. Do you have your source avail?
RE: XSS Cookie Stealer Help - Eclipse - 08-02-2015
Most of the time it's a simple case of JavaScript on the client side and PHP on your webserver to log requests. You use JavaScript to sent a request containing the cookie to the webserver, and it logs the request.