Web - Client

Friday 5 July 2019, 15:35  #1
Web - Client - XSS Stored 1
OddWorldBeat
  • 1 posts

Hi guys.
I’m currently trying to retrieve cookie from admin.
I got to the point where I can make his browser request my request catcher, and thus read his cookies - but only _ga and _gid.
When I try to include "document.cookie" in requested url, I got it back at the GET instead of a cookie.
So... does it mean there is some kind of filter on site?