Skip to main content

XSS Attack - Part 4

Hey awl :) welcome once more :P well in diz tut i will be teaching uhh awl abt hijacking d victims website after getting its cookies :D

As  i know i hasnt told uhh awl abt DOMB based XSS bt its quite different so i will be talking abt dt later :)

Session Hijacking




  • Ok now we have got the admin's cookies using both methods, so we need to edit our own browser's cookies. 
  • First of all go to that site's admin login or its main page whose cookies you have.
  • Now delete ALL of your cookies from that page.For this check the topic on cookies. 
  • Now go in your cookies.html page which you have made on a free hosting site and copy everything in front of the Cookie: in a notepad.These are the cookies. 
  • This sign ; separates cookies from each other so first copy the code before the ;i.e the first cookie.
  • Now come back to that vulnerable site and instead of  link add the following code but don't hit enter:
Javascript:void(document.cookie="ADD YOUR COOKIE HERE")
  • Add that cookie in between " " and now hit enter.
  • Do this with all of the cookies and refresh the page.
  • And hurrah!!! you are logged in as administrator.
  • So now go in your admin panel and upload your deface page,now you can do anything to that site.