Cookie Stealing by Cross Site Scripting Tutorial - Irene Salomo.wmv

[dan95boy]

it's somebody here who doesn't have internet?

[Harry0Putt0Punjabi]

What you did after when you uploaded the files ??? Cant understand that part.. Please elaborate..!

[DonMino95]

ofees is closed. where i can find web hosting?

[bmxaspodilatis]

will it work in hotmail!?:P

[bcut]

absolutely fantastic, beautiful and wonderful knowledge and tutorial. thanks so much!

[Zzasr]

Oh and, people who ask; Can i hack facebook/gmail/hotmail/windows or whatever with this. Should better or just quit or visit some XSS (CSS) articles..

[Zzasr]

Always remember: 'The quieter you are, the more you are able to hear'.

[1terrellcorp]

Can u tell me if this is a non-persistent type or a persistent type of XSS?

[18teenandup]

Motherfucker your awesome!!!!

[shinobikid27]

Nice job!

[FasStudio]

Would you mind helping me out? What did you type? I can't see the difference from | I l.. Help, please.

[BraveMeat]

Can i hack facebook by using XSS?

[oliverxboxable]

@BraveMeat surprisingly there used to be facebook apps vulnerable to SQL injection and xss but the vulnerabilities couldn't be used to get user credentials or session hijack.

[BraveMeat]

Can you give other website than 0fees.net,it doesn't work for me.I can login.It says current suspended in my country.

[BraveMeat]

Does this hack works on a Laptop?

And does it work if i use wireless network?

[TheEquniox]

@BraveMeat ofc you can.

[therao123]

Does not have to be click, could be just location.href = desired url + document.cookie

[MarlboroClassic]

not working now... almost a year

[haseebsaad97]

Irene, you rock!!!! Truly!!!!!

[devilhacker2011]

Hey can you copy paste that cookie cause theere is an error for that cookie that i type might be some error in my typing

[ZerkosXD]

how do i install firebug it just gives me a stupid file which i can't open?

[febeks]

hello, i need help, a put the link and when i click on the link and after this i open the log.txt there is no COOKIE, just DATE :Tuesday 2400 2011f May 2011 09:26:00 PM || USER AGENT :Mozilla/5.0 (Windows NT 6.1; rv:2.0.1) Gecko/20100101 Firefox/4.0.1 || COOKIE : ....can you help me??

[Buldok88]

@febeks Yea same problem :/

[ILOVEMYMOMMYTOO]

What do i do to create the script?

[DeRandomSpamm]

What do you mean by noting down the URL of something.php?

[tallesthuman]

why r u wrting irne_march2003.0fees.net instead of ronald and how will i know dat id

of my enemy? please help me......!

[tallesthuman]

why r u wrting irne_march2003.0fees.net instead of ronald and how will i know dat id

of my enemy? please help me......!

[ThePujs]

try: 110mb. com or my3gb. com

[Kefren4400]

I can't get the URL adress of the php file... don't know why. It just will keep opening it with wordpad and the adress it gives me is some sort of javascript bullshit.

Have any idea of how to solve this?

thanks

[rajthecool2010]

hey friend can u upload the script any wer so dat i can download.....:)i am not getting the right coed...when i upload nothings apers only a blan page so.......can u upload dat script...thankx

[peterjoukovski]

Thanks

[EZN15]

Can I use someone's brain instead of mine? :) :) :)

[Krisler12]

One question if not bother:

Using this cookie stealing method will steal only the cookie from the current injected site OR it will steal ALL victim cookies from the ALL sites he has loged in ?

Thank you !

[hamzarabani]

forgot about brain :(

[coolcoolpolo]

this would be useful for begginers who do not know where to start ;)

[SteamSourceSDK]

+Dude thx 4 this Tut !

[discipleofchrist101]

@SteamSourceSDK I followed all of the directions but when i tested it, it redirected me to somewhere else.I don't know what i did wrong. Maybe someone could help?

[SteamSourceSDK]

FUCK ! I FORGOTT MY BRAIN .. SHIT

[MrNetw0rk]

Sorry, my English is not so good, so I use a translator!

So, my problem is: I did everything to follow these instructions and he also writes in the log.txt file, however, he writes the cookie, why not?

[rarandy21]

hmmmmmmmm

[Bobinelko]

can i hack gmail with this? reason is that i was sharing rapidshare and hellshare account with my "friend" for one year 2.5tb trafficshare he had it on his gmail registered and he changed password pls help :/

[ireneChopin]

@Bobinelko sorry, but i think it can't be applied into gmail.

[aproductions09]

@ireneChopin can it work with roblox accounts??

[071598dave]

@Bobinelko You crazy? Gmail will fucking kill you.

[iliescosmin]

Doest matter..nowadays is imposible to steal a cookie with xss :)

[iliescosmin]

Got a problem with my fees account...it wont log in...ive already registered 3 accounts..

[ireneChopin]

@iliescosmin maybe you can search another free web hostings. there must be a bunch of it

[daeheadshot]

@iliescosmin try Freezoka . net

[ireneChopin]

@xBLiizARD : coz that's part of the URL address from my web hosting where I upload the script to steal cookie :)

[chris420starke]

@ireneChopin

hey I can't figure out where to find the URL for my something.php file after I upload it,

I've tried like 100 different things and none work? How did you figure yours?

[chris420starke]

@chris420starke and thats javascript doesn't make the link only say click here for more detail, it has a bunch of percent and numbers when i try it :P

[tallesthuman]

@chris420starke found how to do?

have the same problem pls help

[greatavielite]

please tell me wats the name of song??

[ireneChopin]

@greatavielite Victory played by BOND - a female band who plays string instruments

[iliescosmin]

The name of the song?o_O I kinda like it ^^

[ireneChopin]

@iliescosmin Victory played by BOND - a female band who plays string instruments

[johnnyvirus1]

asd

[iliescosmin]

wow o_O Name of the song?

[1234blabla1234]

strip_tags olleee!

[marciosant100]

227976480006=

[marciosant100]

Responder a este vídeo...

[RepreJuse4]

change song?

[slier81]

instead of put link to g back to previous page

u can use header() to redirect user to previous page

or run the script in its own frame

[ireneChopin]

@slier81 Thanks mate.....nice suggestion. 

[fdgaf]

gud jobb dudeee

[JimNewton99]

well done, very nice tutorial

[ireneChopin]

@JimNewton99 : Thanks..:)

[ireneChopin]

Thanks. actually not all websites are vulnerable towards this attack, so maybe you need to do some scanning process. there are some tools available to scan a website to know whether it's vulnerable or not.

[ireneChopin]

@Ko David: hehehe....thx ko!

[calvinandhodge]

Good tut, however, when I try to test it, I always get an undefined index error. Any ideas?

[wangdaw3i]

good one. keep up the good work