+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Beginner Hacking (https://hackforums.net/forumdisplay.php?fid=4)
+----- Forum: Hacking Tutorials (https://hackforums.net/forumdisplay.php?fid=47)
+----- Thread: [TUTORIAL] Raising sniffer for XSS vulnerabilities (/showthread.php?tid=6067222)
[TUTORIAL] Raising sniffer for XSS vulnerabilities - Central Sky - Apr 15, 2020
In this article I will tell you how to raise a sniffer for introducing vulnerability in XSS with the subsequent hijacking of cookies.
The sniffer that I wrote sends a log to Telegram which, as for me, is quite convenient.
The log from the sniffer has the following form:
IP - 185.250.207.58
Country - Netherlands
City - Dronten
Test site
Date - 04/09/2020 21:25:39
User Agent - Mozilla/5.0 (Windows NT 6.3; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.163 Safari/537.36
Referer -
Cookies - test=coookie; test2=cooke2;
In order to install the sniffer, simply upload the notify.php file to your hosting.
Also on GitHub I added the Sniffer.php file. This is an example of using a sniffer (You can simply rename, add a bot token and your Telegram ID)
Implementation example:
https://pastebin.com/vdXXyeiu
Link to the sniffer sources - https://github.com/Conivars/Xss-Snifer-On-Telegram/