Web - Client

mardi 14 juillet 2020, 13:02  #1
Web - Client — XSS Stockée 1
Kongga
  • 2 posts

If i get it right, as a client, i don’t have cookie from the website of the challenge but the admin does ?
Is it possible to inject a script that write all the cookie in the comment if the user connecting to the site as cookies ?

jeudi 30 juillet 2020, 23:19  #2
Web - Client — XSS Stockée 1
Kongga
  • 2 posts

Nevermind, if your stuck to get the cookie, the website postb.in might help you :)