+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Website Hacking (https://hackforums.net/forumdisplay.php?fid=43)
+---- Thread: [tut]Basic Xss (and cookie stealing explenation) (/showthread.php?tid=1979804)
Pages: Pages
1
2
* - Exzib - Oct 8, 2012
The cookie logger doesnt work, it says
Cookie:
Then its nothing after it :(
* - Dr Chlamydia - Oct 8, 2012
thanks for the tutorial :)!!! :) goodd
* - logging1220 - Nov 12, 2012
Can i steal cookie only on persistent ?
Thanks for this tut it helps me alot
* - Goodies - Nov 12, 2012
Great tutorial but the widened fucked up the screen on my iPod touch XD thanks again for posting OP!
* - xx 0x0 xx - Nov 12, 2012
exactly what i was need thanks alot brother for being kind and type this nice tutorial
* - Ankush - Nov 23, 2012
how could i know that the site is vulnerable to persistant or non persistant??
* - thedudor2 - Nov 23, 2012
Thanks for the tutorial, yeah i second the question above anyone??
* - Pеrl - Nov 23, 2012
(Nov 23, 2012 02:10 AM)Ankush Wrote: how could i know that the site is vulnerable to persistant or non persistant??
Well, if you do get the alert popup, then the place where you injected the code like a search bar for example, if u visit the search bar again and enter anything u want like "Hi" and the alert popsup thats persistent, persistent stays on the site forever, but non-persistent doesn't, so if u injected the code and its non-persistent then if u go back and search anything like "Hi" u woudnt get the popup, tried explaining it into the most easyiest way I can, correct me if im wrong. but persistent are hard to find, you will be lucky to find one, but even doe its persistent or non-persistent if its vulnerable to xss, you will still get that popup if you put a script for example "/><BODY ONFOCUS=prompt(9)> or "/><img src=a ONERROR=alert(9)> I usually figure out if its vuln first so i type xss<>/" into the place you are injecting it and then go to the source and search xss, if it is there then its vuln, if it isn't then its not, close your tage b4 u start go "/>
* - Ankush - Nov 23, 2012
(Nov 23, 2012 05:47 AM)Pеrl Wrote: Well, if you do get the alert popup, then the place where you injected the code like a search bar for example, if u visit the search bar again and enter anything u want like "Hi" and the alert popsup thats persistent, persistent stays on the site forever, but non-persistent doesn't, so if u injected the code and its non-persistent then if u go back and search anything like "Hi" u woudnt get the popup, tried explaining it into the most easyiest way I can, correct me if im wrong. but persistent are hard to find, you will be lucky to find one, but even doe its persistent or non-persistent if its vulnerable to xss, you will still get that popup if you put a script for example "/><BODY ONFOCUS=prompt(9)> or "/><img src=a ONERROR=alert(9)> I usually figure out if its vuln first so i type xss<>/" into the place you are injecting it and then go to the source and search xss, if it is there then its vuln, if it isn't then its not, close your tage b4 u start go "/>
ok thanks for explaining it so thoroughly... ✌
* - skunks - Sep 11, 2013
real awsome tut thank you useful for share
* - 133720 - Sep 11, 2013
Nice Tut.
Now I'm learning XSS lol..
Thanks
* - Enlightenedch33s3ballz - Jul 24, 2014
Nice tut im still learning the ins and outs of web hacking so this is a nice newb tutorial for me.
* - jeckyll_real - Mar 3, 2016
XSS is one of the things that I have to learn, thanks