[Exzib]

The cookie logger doesnt work, it says
Cookie:

Then its nothing after it :(

[Dr Chlamydia]

thanks for the tutorial :)!!! :) goodd

[logging1220]

Can i steal cookie only on persistent ?

Thanks for this tut it helps me alot

[Goodies]

Great tutorial but the widened fucked up the screen on my iPod touch XD thanks again for posting OP!

[xx 0x0 xx]

exactly what i was need thanks alot brother for being kind and type this nice tutorial

[Ankush]

how could i know that the site is vulnerable to persistant or non persistant??

[thedudor2]

Thanks for the tutorial, yeah i second the question above anyone??

[Pеrl]

how could i know that the site is vulnerable to persistant or non persistant??

Well, if you do get the alert popup, then the place where you injected the code like a search bar for example, if u visit the search bar again and enter anything u want like "Hi" and the alert popsup thats persistent, persistent stays on the site forever, but non-persistent doesn't, so if u injected the code and its non-persistent then if u go back and search anything like "Hi" u woudnt get the popup, tried explaining it into the most easyiest way I can, correct me if im wrong. but persistent are hard to find, you will be lucky to find one, but even doe its persistent or non-persistent if its vulnerable to xss, you will still get that popup if you put a script for example "/><BODY ONFOCUS=prompt(9)> or "/><img src=a ONERROR=alert(9)> I usually figure out if its vuln first so i type xss<>/" into the place you are injecting it and then go to the source and search xss, if it is there then its vuln, if it isn't then its not, close your tage b4 u start go "/>

[Ankush]

Well, if you do get the alert popup, then the place where you injected the code like a search bar for example, if u visit the search bar again and enter anything u want like "Hi" and the alert popsup thats persistent, persistent stays on the site forever, but non-persistent doesn't, so if u injected the code and its non-persistent then if u go back and search anything like "Hi" u woudnt get the popup, tried explaining it into the most easyiest way I can, correct me if im wrong. but persistent are hard to find, you will be lucky to find one, but even doe its persistent or non-persistent if its vulnerable to xss, you will still get that popup if you put a script for example "/><BODY ONFOCUS=prompt(9)> or "/><img src=a ONERROR=alert(9)> I usually figure out if its vuln first so i type xss<>/" into the place you are injecting it and then go to the source and search xss, if it is there then its vuln, if it isn't then its not, close your tage b4 u start go "/>

ok thanks for explaining it so thoroughly... ✌

[skunks]

real awsome tut thank you useful for share

[133720]

Nice Tut.
Now I'm learning XSS lol..
Thanks

[Enlightenedch33s3ballz]

Nice tut im still learning the ins and outs of web hacking so this is a nice newb tutorial for me.

[jeckyll_real]

XSS is one of the things that I have to learn, thanks