Cookie Stealing by Cross Site Scripting Tutorial – Irene Salomo.wmv
May.07, 2011 in
Cross-Site Scripting

This is a tutorial video about how to steal cookie using Cross Site Scripting (XSS) technique. Once you got victim’s cookie, you can login using his/her account even without knowing his/her password. If you have critiques, suggestions, questions, just drop your comments here ![]()
Video Rating: 5 / 5
Incoming search terms:
- xss tutorial pdf
- xss tutorial
- steal cookie example
- steal cookies facebook
- Expert authors in our free article directory car radio security codes
- Expert authors in our free article directory car audio system
- cross site scripting tutorial pdf
- cookie stealing by cross site scripting tutorial
- Cookie Stealing
- php cookie stealing
Related posts:
- Web Security Exploits: Trojan Horse, Cross-Site Scripting, Session Fixation, Idn Homograph Attack, Cross-Site Request Forgery, Clickjacking
- Issues with Amazon.com and javascript(cross site scripting)?
- cross site scripting demonstration (imbedded)
- Xss Unleashed: the Dangers of Cross-site Scripting
- Penetration Testing: Cross-Site Scripting Explained – 7Safe, Aleksander Gorkowienko

May 7th, 2011 at 4:46 am
What do i do to create the script?
May 7th, 2011 at 5:09 am
What do you mean by noting down the URL of something.php?
May 7th, 2011 at 5:44 am
@chris420starke found how to do?
have the same problem pls help
May 7th, 2011 at 6:26 am
why r u wrting irne_march2003.0fees.net instead of ronald and how will i know dat id
of my enemy? please help me……!
May 7th, 2011 at 7:09 am
why r u wrting irne_march2003.0fees.net instead of ronald and how will i know dat id
of my enemy? please help me……!
May 7th, 2011 at 7:55 am
try: 110mb. com or my3gb. com
May 7th, 2011 at 8:03 am
I can’t get the URL adress of the php file… don’t know why. It just will keep opening it with wordpad and the adress it gives me is some sort of javascript bullshit.
Have any idea of how to solve this?
thanks
May 7th, 2011 at 8:44 am
hey friend can u upload the script any wer so dat i can download…..:)i am not getting the right coed…when i upload nothings apers only a blan page so…….can u upload dat script…thankx
May 7th, 2011 at 9:11 am
Thanks
May 7th, 2011 at 9:15 am
@SteamSourceSDK I followed all of the directions but when i tested it, it redirected me to somewhere else.I don’t know what i did wrong. Maybe someone could help?
May 7th, 2011 at 10:00 am
Can I use someone’s brain instead of mine?
May 7th, 2011 at 10:08 am
One question if not bother:
Using this cookie stealing method will steal only the cookie from the current injected site OR it will steal ALL victim cookies from the ALL sites he has loged in ?
Thank you !
May 7th, 2011 at 10:49 am
forgot about brain
May 7th, 2011 at 11:08 am
stop this stupid tutorial if u continue every one wil steal my cookie u fool =(
May 7th, 2011 at 12:06 pm
@Bobinelko You crazy? Gmail will fucking kill you.
May 7th, 2011 at 1:01 pm
this would be useful for begginers who do not know where to start
May 7th, 2011 at 2:00 pm
+Dude thx 4 this Tut !
May 7th, 2011 at 2:54 pm
FUCK ! I FORGOTT MY BRAIN .. SHIT
May 7th, 2011 at 2:59 pm
Sorry, my English is not so good, so I use a translator!
So, my problem is: I did everything to follow these instructions and he also writes in the log.txt file, however, he writes the cookie, why not?
May 7th, 2011 at 3:11 pm
hmmmmmmmm
May 7th, 2011 at 3:37 pm
@Bobinelko sorry, but i think it can’t be applied into gmail.
May 7th, 2011 at 4:29 pm
@iliescosmin maybe you can search another free web hostings. there must be a bunch of it
May 7th, 2011 at 5:13 pm
can i hack gmail with this? reason is that i was sharing rapidshare and hellshare account with my “friend” for one year 2.5tb trafficshare he had it on his gmail registered and he changed password pls help :/
May 7th, 2011 at 5:33 pm
@chris420starke and thats javascript doesn’t make the link only say click here for more detail, it has a bunch of percent and numbers when i try it
May 7th, 2011 at 5:45 pm
@ireneChopin
hey I can’t figure out where to find the URL for my something.php file after I upload it,
I’ve tried like 100 different things and none work? How did you figure yours?