Vulnerable Web Sites XSS ?

Hello everyone.
I have 2 urgent and important issues are:

1 - Can you hack a vulnerable site XSS by injecting him JAVASCRIPT code to extract its secret data such as User Names and Passwords ? If so, how ? What JAVASCRIPT code used to collect data on a secret vulnbérable site XSS?

2 - How to steal cookies through a vulnerable web sites XSS ?

Thank you for helping me better through well-defined explanations.

2 Responses

There's a few ways and you'll have to learn some javascript. I suggest learning more in depth or not do it at all since it's "urgent", because doing something in a quick manor about somehting you don't really know can lead you to trouble.

Simply type in "javascript injection" without quotes into the wonderhowto search bar and you'll see some tuts from Alex Long.

Also if you want to learn some of javascript you could go to http://www.codecademy.com/. They also teach python.

Share Your Thoughts