[Grazzt]

Yeah so after i post comment on site including "" grabify.link/image " Invisible Image Logger " "" i'm getting everyone ip who visiting that infected page address logs.
Me question would be is it possible like get username or maybe user id or even Cookies of the user who visited infected website page like now i'm getting ip address from infected page.

[PerfectStorm]

I don't think so unless the site is really not secure

[Grazzt]

I don't think so unless the site is really not secure

And how i can do it if its really not secure ?

[PerfectStorm]

I don't know get into the admin panel

[Grazzt]

I don't know get into the admin panel

Hmm you miss understood me, i was trying to ask how i can take info from website if its really unsafe by using me specified image method.

[Go0ROM]

There is something called cross-site scripting. This of course, only works if the site is REALLY insecure, but maybe its worth a shot.

Google it, because I can't post links yet. You are probably interested in "Persistent XSS"

[L C K]

The way I know of getting a hold of usernames and password or for better terms user cookies was said above. You can use certian XSS payloads to have stored code to capture all user cookies allowing for unauthorized access to accounts. But as I always say, I will not help you and I do not condemn black hat activities.

[CryptoLs]

If your image is hosted on a different domain you can only log ip address, referrer, headers stuff like that. Cross origin policy will prevent you from getting any login cookies etc unless there is a cross origin header that allows all domains.

[0dayex]

There is something called cross-site scripting. This of course, only works if the site is REALLY insecure, but maybe its worth a shot.

Google it, because I can't post links yet. You are probably interested in "Persistent XSS"

This I personally think is the only way to accomplish this bro. This user has hit the nail on the head.