+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Website Hacking (https://hackforums.net/forumdisplay.php?fid=43)
+---- Thread: Can I steal data or change the data of a website with XSS vulnerability? (/showthread.php?tid=1926338)
Can I steal data or change the data of a website with XSS vulnerability? - Alpha.Stallion997 - Nov 17, 2011
Can I steal data or change the data of a website with XSS vulnerability?
Please answer. Thanks.
* - F4K3R - Nov 17, 2011
u can add a cookie logger & get the cookies ;)
* - Сlassy - Nov 17, 2011
You can inject javascript with XSS. Dont know excatly what kind of thing you are trying to do right now, but I think you need admin login details. Inject a cookie logger on a site and you will someday get admin login.
RE: Can I steal data or change the data of a website with XSS vulnerability? - kirtura - Dec 17, 2018
better to get some beginner guide to safely execute the protocol
RE: Can I steal data or change the data of a website with XSS vulnerability? - raveal - Feb 20, 2019
shooot me dm i think i can help
RE: Can I steal data or change the data of a website with XSS vulnerability? - Sitrep - Feb 20, 2019
Depends on the vulnerability, but you can for example steal session cookies with XSS if the site is vulnerable.
RE: Can I steal data or change the data of a website with XSS vulnerability? - garkolym - Feb 23, 2019
You can inject an iFrame of another page (It must be on the same origin) and then theft the csrf token or take actions, like change email and submit (Account takeover) :)
If its on the same page, you have access to the document object and can do anything
Cookie Stealing ... Too mainstream