Web - Client

Wednesday 30 May 2018, 17:08  #1
Web - Client | XSS Reflected
fedeTibaldo
  • 2 posts

Hi everyone. I managed to trick the bot into triggering my own function, but I’m not able to steal its cookie. I’m quite sure my code isn’t wrong though, since I successfully transmitted my own cookies over the network... Are there other places I may have to look at other than `document.cookie`? `localStorage` maybe?

Wednesday 30 May 2018, 17:35  #2
Web - Client | XSS Reflected
fedeTibaldo
  • 2 posts

It turns out that cookies are not the problem. The problem is that in my browser strings get concatenated, while in the bot’s user agent they don’t...