[V i R u S]

lol already knew this, but still good tutorial!

[Fr88nk]

Hmm. This looks really good, hower I don't understand most of it yet.
But I'll try to work something out :p
Anyways, thanks for this tutorial!

[marsmarin]

I already knew that, but still awesome tutorial

[Diabolis]

Lol, this is some good stuff man, thanks for the xss tut recommendations, I've been learning some crazy stuff today that'll boost my proficiency at least 75+%

Great tut man, thanks for the share ✌

Question: How are you supposed to get the admin cookies from a non-persistent xss or an xsf attack? Send him the entire xss/xsf link through an adfly url and hope he opens it so it steals his cookies?
Also: just thought of this, is it possible to hijack a low-level website, just some old, un-monitered piece of junk, modify a .php file by adding the stealer into the page through a shell, redirect the admin of another website to this website page by simply saying "hey, check out this website page, isn't it cool?", having them look at the page, and getting their cookies stolen so that you can log into their account and deface their website? If you can, that would make my job about 100x easier.

[apparatix]

Hi all,

How would I go about stealing cookies for another website, say, WordPress?

Thanks for the help.

[szoker]

What privilegs i should to give the file log.txt on server?

[wild hackers]

High Quality tutorial!!
u r great dude

[Sky]

Amazing tutorial for beginners, Deserved a even if it is a year old !

~Arcane 🤝

[franzzz]

Very nice tutorial, thanks for share :)

[Dr Chlamydia]

thanks for the tutorial :)!!! :) goodd

[logging1220]

Can i steal cookie only on persistent ?

Thanks for this tut it helps me alot

[thedudor2]

Thanks for the tutorial, yeah i second the question above anyone??

[Pеrl]

how could i know that the site is vulnerable to persistant or non persistant??

Well, if you do get the alert popup, then the place where you injected the code like a search bar for example, if u visit the search bar again and enter anything u want like "Hi" and the alert popsup thats persistent, persistent stays on the site forever, but non-persistent doesn't, so if u injected the code and its non-persistent then if u go back and search anything like "Hi" u woudnt get the popup, tried explaining it into the most easyiest way I can, correct me if im wrong. but persistent are hard to find, you will be lucky to find one, but even doe its persistent or non-persistent if its vulnerable to xss, you will still get that popup if you put a script for example "/><BODY ONFOCUS=prompt(9)> or "/><img src=a ONERROR=alert(9)> I usually figure out if its vuln first so i type xss<>/" into the place you are injecting it and then go to the source and search xss, if it is there then its vuln, if it isn't then its not, close your tage b4 u start go "/>