In this article I will tell you how to raise a sniffer for introducing vulnerability in XSS with the subsequent hijacking of cookies.
The sniffer that I wrote sends a log to Telegram which, as for me, is quite convenient.
The log from the sniffer has the following form:
IP - 185.250.207.58
Country - Netherlands
City - Dronten
Test site
Date - 04/09/2020 21:25:39
User Agent - Mozilla/5.0 (Windows NT 6.3; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.163 Safari/537.36
Referer -
Cookies - test=coookie; test2=cooke2;
In order to install the sniffer, simply upload the notify.php file to your hosting.
Also on GitHub I added the Sniffer.php file. This is an example of using a sniffer (You can simply rename, add a bot token and your Telegram ID)
Implementation example:
https://pastebin.com/vdXXyeiu
Link to the sniffer sources - https://github.com/Conivars/Xss-Snifer-On-Telegram/
The sniffer that I wrote sends a log to Telegram which, as for me, is quite convenient.
The log from the sniffer has the following form:
IP - 185.250.207.58
Country - Netherlands
City - Dronten
Test site
Date - 04/09/2020 21:25:39
User Agent - Mozilla/5.0 (Windows NT 6.3; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.163 Safari/537.36
Referer -
Cookies - test=coookie; test2=cooke2;
In order to install the sniffer, simply upload the notify.php file to your hosting.
Also on GitHub I added the Sniffer.php file. This is an example of using a sniffer (You can simply rename, add a bot token and your Telegram ID)
Implementation example:
https://pastebin.com/vdXXyeiu
Link to the sniffer sources - https://github.com/Conivars/Xss-Snifer-On-Telegram/