XSS, finding and storing cookies...

Ive been looking round on how this is done latly, but theres one bit im still unsure on, im not sure who you would set up a page (examples suggest a .cgi) and save the cookies to this page…

I am googling this, but i thought it would make a handy thread for other people so i decided to post it here aswell, thanks :D

Right, you basically make the page redirect to script.php?cookies=<document.cookie>

and write cookies into a file using script.php

mozzer

right, and that sets the variable 'cookies' with the users cookies, and i make the script save that vaiable to a file….

makes sense, need to look up a lil bit more to do it tho… cheers :)