[r3el]

i was scaning my target using acunetix
then i found Cross site scripting vuln and when i open HTTP editor i found something like this

Code

Cookie: PHPSESSID=okgneookt4q3tvi0g74136mbl2; nws_290=1314

my question is : this is the cookies of the admin ? if yes , how can i use it

[0xB9]

my question is : this is the cookies of the admin ?

No, that's yours.

[r3el]

No, that's yours.

ok thnkx, and when i find the PHPSSID of the admin , how can i use it ?
( and after thah : i'm trying to hack myself in local host , i got my PHPSSID but i dont know how can i use it to hack myself ? )

[SIM-964740]

ok thnkx, and when i find the PHPSSID of the admin , how can i use it ?
( and after thah : i'm trying to hack myself in local host , i got my PHPSSID but i dont know how can i use it to hack myself ? )

With XSS you are meant to inject it into the server such as on comment forms and such (where when you post data it stays on the website), and your script should post data back to you. So for example you could find a vuln. page, inject your script to that page and direct your victims to the vulnerable page with your malicious code and your script that you make should post data of every user who loads it.

[r3el]

With XSS you are meant to inject it into the server such as on comment forms and such (where when you post data it stays on the website), and your script should post data back to you. So for example you could find a vuln. page, inject your script to that page and direct your victims to the vulnerable page with your malicious code and your script that you make should post data of every user who loads it.

i just want to know how i use the PHPSSID beacuse i got it by inject javascript code

[SIM-964740]

i just want to know how i use the PHPSSID beacuse i got it by inject javascript code

From what you have been saying you have only retreived your own PHPSESSID. You arent going to do shit with that. Look at my other reply on your threads.