Home Upgrade Search Memberlist Extras Hacker Tools Award Goals Help Wiki Contact

Using stolen Cookie (via XSS)

Hey all,

I think I figured out how to inject/use captured Cookies.

I am using Tamper Data (Firefox addon) for it. I can edit the HTTP Request and put my Cookie in.

But I noticed now a problem. It seems that it dont work for every site.
Before we discuss this, I would like to know:

Is every site using session cookies, that got also a login area for users?
I would say yes.

I tried my own cookies instead logging in with the login details, but it works only for form-logins (POST-Method), i.e. forums, cms, etc. .

But it doesnt work on basic popup-logins (GET-Method), i.e. porn, erotic sites.

For example I tried this:
(basic popup Login -> GET Method)
http://www.chocolatemodels.com/cmonlinem...y2013.html

I can send you the login details, but i am not going to send them to noobs (for leeching).

I captured a (my) cookie like this (with tamper data):

__unam=2761862-13bcab1107e-6c0d4f70-65; __atuvc=1%7C52%2C1%7C1%2C0%7C2%2C1%7C3; default=xpacrock

then I tried to use the cookie in a new private window instead of a normal login, but it doesnt work.
my question is now, how can I login to this site with a captured cookie?

Background:
https://hackforums.net/showthread.php?tid=3726581
https://hackforums.net/showthread.php?tid=3757796


Possibly Related Threads...
Thread / Author Replies Views Last Post
by 31flebariJan 23, 2017 03:39 PM 4 156 Jan 23, 2017 03:39 PM
Last Post: 31flebari
by cryptoAnonNov 23, 2014 12:01 PM 3 72 Nov 23, 2014 12:01 PM
Last Post: tux1
by okol123Nov 2, 2014 01:30 PM 11 815 Nov 2, 2014 01:30 PM
Last Post: Niely