<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0" xmlns:dc="http://purl.org/dc/elements/1.1/">
    <channel>
        <title>one by one cookie</title>
        <description>Hello,
i stole cookie of a user, but i can't login right away with :
javascript:document.cookie=&amp;quot;user=1;password=434rerdsd343;&amp;quot;
instead, i have to enter one by one, first with user, and then with password to login.</description>
        <link>http://sla.ckers.org/forum/read.php?2,31982,31982#msg-31982</link>
        <lastBuildDate>Wed, 19 Jun 2013 19:00:12 -0500</lastBuildDate>
        <generator>Phorum 5.2.15a</generator>
        <item>
            <guid>http://sla.ckers.org/forum/read.php?2,31982,32068#msg-32068</guid>
            <title>Re: one by one cookie</title>
            <link>http://sla.ckers.org/forum/read.php?2,31982,32068#msg-32068</link>
            <description><![CDATA[actually, I remember that you told me it was firefox only.. haha<br />
anyway dont trust my memory =/]]></description>
            <dc:creator>sirdarckcat</dc:creator>
            <category>XSS Info</category>
            <pubDate>Thu, 29 Oct 2009 23:31:09 -0500</pubDate>
        </item>
        <item>
            <guid>http://sla.ckers.org/forum/read.php?2,31982,32067#msg-32067</guid>
            <title>Re: one by one cookie</title>
            <link>http://sla.ckers.org/forum/read.php?2,31982,32067#msg-32067</link>
            <description><![CDATA[sirdarckcat Wrote:<br />
-------------------------------------------------------<br />
&gt; @kuza55<br />
&gt; that's firefox only right?<br />
<br />
<br />
Contrary to what I would have thought, yes, this is Firefox only (did a quick test of Chrome, IE 8, Opera 10, Safari 4).<br />
<br />
Interestingly though, everything besides IE would truncate on \n....<br />
<br />
Does anyone remember this working in other browsers, or did I just never bother to test this outside Firefox?]]></description>
            <dc:creator>kuza55</dc:creator>
            <category>XSS Info</category>
            <pubDate>Thu, 29 Oct 2009 20:34:12 -0500</pubDate>
        </item>
        <item>
            <guid>http://sla.ckers.org/forum/read.php?2,31982,32052#msg-32052</guid>
            <title>Re: one by one cookie</title>
            <link>http://sla.ckers.org/forum/read.php?2,31982,32052#msg-32052</link>
            <description><![CDATA[@kuza55<br />
that's firefox only right?]]></description>
            <dc:creator>sirdarckcat</dc:creator>
            <category>XSS Info</category>
            <pubDate>Wed, 28 Oct 2009 23:43:16 -0500</pubDate>
        </item>
        <item>
            <guid>http://sla.ckers.org/forum/read.php?2,31982,32044#msg-32044</guid>
            <title>Re: one by one cookie</title>
            <link>http://sla.ckers.org/forum/read.php?2,31982,32044#msg-32044</link>
            <description><![CDATA[Ryonan Wrote:<br />
-------------------------------------------------------<br />
&gt; Hello,<br />
&gt; i stole cookie of a user, but i can't login right<br />
&gt; away with :<br />
&gt; javascript:document.cookie=&quot;user=1;password=434rer<br />
&gt; dsd343;&quot;<br />
&gt; instead, i have to enter one by one, first with<br />
&gt; user, and then with password to login.<br />
<br />
document.cookie does actually let you do multiple cookies at a time, however it splits cookies by new line rather than by semi-colon, so this would work:<br />
<br />
javascript:document.cookie=&quot;user=1\napassword=434rerdsd343&quot;;alert(document.cookie);<br />
<br />
<br />
fun cookie-setting bugs for all if you find somewhere letting you set a cookie 'value' in js]]></description>
            <dc:creator>kuza55</dc:creator>
            <category>XSS Info</category>
            <pubDate>Wed, 28 Oct 2009 18:29:40 -0500</pubDate>
        </item>
        <item>
            <guid>http://sla.ckers.org/forum/read.php?2,31982,32027#msg-32027</guid>
            <title>Re: one by one cookie</title>
            <link>http://sla.ckers.org/forum/read.php?2,31982,32027#msg-32027</link>
            <description><![CDATA[I think it's Escobar]]></description>
            <dc:creator>Anonymous User</dc:creator>
            <category>XSS Info</category>
            <pubDate>Mon, 26 Oct 2009 09:08:27 -0500</pubDate>
        </item>
        <item>
            <guid>http://sla.ckers.org/forum/read.php?2,31982,32026#msg-32026</guid>
            <title>Re: one by one cookie</title>
            <link>http://sla.ckers.org/forum/read.php?2,31982,32026#msg-32026</link>
            <description><![CDATA[<pre class="bbcode">javascript:void prompt(&quot;Put da cookie!:&quot;,document.cookie).replace(/[^;]+/g,function(_){document.cookie=_;});</pre>
<br />
&gt;  What's that language ? Eskimor ??<br />
javascript<br />
<br />
;)]]></description>
            <dc:creator>sirdarckcat</dc:creator>
            <category>XSS Info</category>
            <pubDate>Mon, 26 Oct 2009 08:31:43 -0500</pubDate>
        </item>
        <item>
            <guid>http://sla.ckers.org/forum/read.php?2,31982,32022#msg-32022</guid>
            <title>Re: one by one cookie</title>
            <link>http://sla.ckers.org/forum/read.php?2,31982,32022#msg-32022</link>
            <description><![CDATA[Spanish - <b><u>Es</u></b>pañol]]></description>
            <dc:creator>lightos</dc:creator>
            <category>XSS Info</category>
            <pubDate>Mon, 26 Oct 2009 03:09:59 -0500</pubDate>
        </item>
        <item>
            <guid>http://sla.ckers.org/forum/read.php?2,31982,32021#msg-32021</guid>
            <title>Re: one by one cookie</title>
            <link>http://sla.ckers.org/forum/read.php?2,31982,32021#msg-32021</link>
            <description><![CDATA[What's that language ? Eskimor ??]]></description>
            <dc:creator>Ryonan</dc:creator>
            <category>XSS Info</category>
            <pubDate>Mon, 26 Oct 2009 01:16:29 -0500</pubDate>
        </item>
        <item>
            <guid>http://sla.ckers.org/forum/read.php?2,31982,32017#msg-32017</guid>
            <title>Re: one by one cookie</title>
            <link>http://sla.ckers.org/forum/read.php?2,31982,32017#msg-32017</link>
            <description><![CDATA[<img src="http://4.bp.blogspot.com/_ICQ87LsNC0g/SWDLSC2ZLWI/AAAAAAAADYQ/1fPu7scmcxA/s400/reporter_standing.jpg" class="bbcode" border="0" />So you mean you can do this?<pre class="bbcode">javascript:void prompt(&quot;Put da cookie!:&quot;,document.cookie).replace(/[^;]+/g,function(_){document.cookie=_;});</pre>taken from da wikipedia<br />
http://es.wikipedia.org/wiki/XSS]]></description>
            <dc:creator>sirdarckcat</dc:creator>
            <category>XSS Info</category>
            <pubDate>Sun, 25 Oct 2009 08:22:42 -0500</pubDate>
        </item>
        <item>
            <guid>http://sla.ckers.org/forum/read.php?2,31982,32015#msg-32015</guid>
            <title>Re: one by one cookie</title>
            <link>http://sla.ckers.org/forum/read.php?2,31982,32015#msg-32015</link>
            <description><![CDATA[This is now my favourite thread this week]]></description>
            <dc:creator>Gareth Heyes</dc:creator>
            <category>XSS Info</category>
            <pubDate>Sun, 25 Oct 2009 05:52:35 -0500</pubDate>
        </item>
        <item>
            <guid>http://sla.ckers.org/forum/read.php?2,31982,32014#msg-32014</guid>
            <title>Re: one by one cookie</title>
            <link>http://sla.ckers.org/forum/read.php?2,31982,32014#msg-32014</link>
            <description><![CDATA[yes, they're picking on you.]]></description>
            <dc:creator>thrill</dc:creator>
            <category>XSS Info</category>
            <pubDate>Sun, 25 Oct 2009 01:20:51 -0500</pubDate>
        </item>
        <item>
            <guid>http://sla.ckers.org/forum/read.php?2,31982,32011#msg-32011</guid>
            <title>Re: one by one cookie</title>
            <link>http://sla.ckers.org/forum/read.php?2,31982,32011#msg-32011</link>
            <description><![CDATA[lol, somebody can explain about it ?]]></description>
            <dc:creator>Ryonan</dc:creator>
            <category>XSS Info</category>
            <pubDate>Sat, 24 Oct 2009 22:36:18 -0500</pubDate>
        </item>
        <item>
            <guid>http://sla.ckers.org/forum/read.php?2,31982,32010#msg-32010</guid>
            <title>Re: one by one cookie</title>
            <link>http://sla.ckers.org/forum/read.php?2,31982,32010#msg-32010</link>
            <description><![CDATA[I'll alert the media.]]></description>
            <dc:creator>thrill</dc:creator>
            <category>XSS Info</category>
            <pubDate>Sat, 24 Oct 2009 17:26:37 -0500</pubDate>
        </item>
        <item>
            <guid>http://sla.ckers.org/forum/read.php?2,31982,32009#msg-32009</guid>
            <title>Re: one by one cookie</title>
            <link>http://sla.ckers.org/forum/read.php?2,31982,32009#msg-32009</link>
            <description><![CDATA[thats beautiful, thanks for letting us now.]]></description>
            <dc:creator>Reiners</dc:creator>
            <category>XSS Info</category>
            <pubDate>Sat, 24 Oct 2009 16:10:31 -0500</pubDate>
        </item>
        <item>
            <guid>http://sla.ckers.org/forum/read.php?2,31982,31982#msg-31982</guid>
            <title>one by one cookie</title>
            <link>http://sla.ckers.org/forum/read.php?2,31982,31982#msg-31982</link>
            <description><![CDATA[Hello,<br />
i stole cookie of a user, but i can't login right away with :<br />
javascript:document.cookie=&quot;user=1;password=434rerdsd343;&quot;<br />
instead, i have to enter one by one, first with user, and then with password to login.]]></description>
            <dc:creator>Ryonan</dc:creator>
            <category>XSS Info</category>
            <pubDate>Thu, 22 Oct 2009 09:04:29 -0500</pubDate>
        </item>
    </channel>
</rss>
