CoolApps (2014-11-16 14:17:07)

---

Not too long ago, I have created a script that takes advantage of document.cookie that can be used in places such as URLs, websites that allow this type of input (direct input) are vulnerable to XSS injections.
XSS injection is where a site doesn't sanitize user input correctly (or at least at all) and therefore JavaScript or any other language (HTML, CSS) can be used along with it.


XSSCC lists the cookies captured from that arbitrary code used, as it only lists and does not log (that would be illegal), the only way to see the results is to make a URL with this (could be URL BBCodes). You can make the downloaded project log but you must only use that for YOUR site, unless you've got permission from the site owner (which would be highly doubtable).

- DO NOT USE THIS FOR ILLEGAL PURPOSES ALSO, SCRIPT KIDDIES SHALL NOT USE THIS TOOL -


Read the README (under the directory listing of the project files) first before downloading, I'm not responsible for anything that happens after you obtain the file(s). This will contain the disclaimer, warnings, how to, features and all of that stuff.

GitHub

This post has been edited one or more times, the last time was:
2014-11-16 14:19:48

---

TwilightWinter (2015-06-14 21:55:08)

---

I'm sorry.

---

CoolApps (2015-06-15 11:20:00)

---

what.

---