Posts

Showing posts from December, 2012
Image
15.COMPLETE TUTORIAL ON MAKING XSS ATTACK:                                           XSS (PERSISTENT & NON-PERSISTENT                                                   Hi XSS CAN BE DONE  in 2 ways, Persistent and Non-Persistent type. For XSS we will use something called a cookie catcher. Question will be that why we would need someone else's cookie? The answer is that we can change our browser's cookies to login as them!!! So lets call it Session Hijacking First go to a free hosting site like http://www.110mb.com or other php hosting sites and register there. Then download this cookie catcher and upload it. Cookie Catcher: http://adf.ly/Tdbm What does the cookie catcher do? It grabs the user's: Cookies IP Referral link which what page it got to that link Time and Date Get Vulnerable sites: Ok first we need sites that are vulnerable to XSS so it will work on them. To test it we will need to add a code after the link. I will use this si