in the cookie jar

Kirk · Post by **Kirk** » 06 Feb 2010, 08:54

I would like to know if I am correct here and if I am how it works. If I am able to steal somebody's cookies I am then able to mask myself as them. How does this work exactly?

Post by **bad_brain** » 06 Feb 2010, 10:23

usually it is done via Javascript, check those links for more info:

http://en.wikipedia.org/wiki/Cross-site_scripting
http://en.wikipedia.org/wiki/Cross-Site_Request_Forgery
http://ha.ckers.org/xss.html

here is an example of how the code would look like:
http://jehiah.cz/archive/xss-stealing-cookies-101

sorry that I am only posting links, but I can't post any code of that kind here....

at the start of suck-o we had a couple of cookie stealing attempts by users that posted forged Javascript links, that's why it is filtered now. but I think the links above will give you enough info for a good start...

Dltr · Post by **Dltr** » 06 Feb 2010, 10:41

but I think the links above will give you enough info for a good start...

Thank You bad_brain this really a very good Start , i was looking for (XSS) Read Two Days ago

!

Code: Select all

http://www.houbysoft.com/papers/xss.php

This is a Little Basic Idea of XSS .

Thank You
Dltr