Results 1 to 7 of 7

Thread: [Roblox program request ] Is it possible to make a cookie grabber?

  1. #1

    Joined
    Nov 2012
    Posts
    854
    Userbars
    3
    Thanks
    214
    Thanked
    128/109
    DL/UL
    37/0
    Mentioned
    114 times
    Time Online
    36d 19h 35m
    Avg. Time Online
    12m

    [Roblox program request ] Is it possible to make a cookie grabber?

    Is it possible to make a cookie grabber link for roblox?
    Or any other programs that are similar like auto buyers?

    Paying for a program if it is possible for one to be made? I believe roblox is squirrel.

    How much would it cost?

    Anybody up for a challenge of it is one?

  2. #2

    Joined
    Jun 2012
    Posts
    1,699
    Thanks
    876
    Thanked
    2,881/1,142
    DL/UL
    44/1
    Mentioned
    562 times
    Time Online
    118d 6h 45m
    Avg. Time Online
    40m
    Depends to much on the site , you need a link where what you input is echoed in the page so for instance if there a search box that lets you search for 'hats' and then the next page says something like:

    Found 10202 results for hats

    We could change the word hats then to our own html if it was not properly checked , but this is doubtfull. Cookie grabbers are easy to stop now days with some simple built in functions. No ones really going to speand time investigating this though as coming across a xss can take alot of time , skill and most of all alot of luck.

    Here is a e.g of a cookie grabber on neopets:

    (you need an account to see links) rox

    notice how when we visit this link 'xss rox' is in the source code?

    Lets change it up a little to some html....

    (you need an account to see links)


    Oh neat now it shows a love heat gif using image codes .

    And here is what a actual cookie grab would look like:

    (you need an account to see links)

    stealcookie.js can then be used to log our browser cookie.
    Last edited by DarkByte; 07-02-2014 at 04:40 AM.

  3. #3



    Vindictive's Avatar
    Joined
    Feb 2014
    Posts
    1,759
    Userbars
    10
    Thanks
    8
    Thanked
    709/450
    DL/UL
    32/0
    Mentioned
    312 times
    Time Online
    77d 22h 42m
    Avg. Time Online
    30m
    What can this cookie geabber script be used for on Neo? @(you need an account to see links)

  4. #4
    Saiyan Race
    j03's Avatar
    Joined
    Dec 2011
    Posts
    13,720
    Userbars
    166
    Thanks
    5,906
    Thanked
    33,076/6,608
    DL/UL
    23/36
    Mentioned
    3,867 times
    Time Online
    563d 4h 55m
    Avg. Time Online
    3h 13m
    Quote Originally Posted by Vindictive View Post
    What can this cookie geabber script be used for on Neo? @(you need an account to see links)
    Well, it's called a cookie grabber, so what do you think?

    But he was only showing an example, and he did not provide an actual script. This will not work on Neopets unless you find yourself an exploit somewhere.
    (you need an account to see links)
    (you need an account to see links)(you need an account to see links)

    ------------------------
    [02/24/2013] Stealth CORE is made into the first standalone Neopets auto-player.
    ------------------------


  5. #5

    Joined
    Jun 2012
    Posts
    1,699
    Thanks
    876
    Thanked
    2,881/1,142
    DL/UL
    44/1
    Mentioned
    562 times
    Time Online
    118d 6h 45m
    Avg. Time Online
    40m
    I actually posted a exploit joe ,

    (you need an account to see links)

    Its that old one i reported months back and they never fixed it maybe they will now .


    Pretty much a cookie is how your browser remembers your login details for neopets. This lets u steal someones and use there cookie , so you login as them. They are not as powerfull as they once was and this is a external one. The best way to use this would be to send someone a link that loads a image or something to get there attention. In the back ground load a iframe that links to the Xss link but make its width/height 0 so the user cant even see it. Now when they visit your link to look at what they think is a sshot or whatever you steal there cookie in the background.

    Its fun to troll with and i suppose you could be destructive (spend a persons np/nc on junk , get people banned ect)..
    Last edited by DarkByte; 07-09-2014 at 10:35 AM.

  6. The Following User Says Thank You to DarkByte For This Useful Post:

    Rambo (07-09-2014)

  7. #6



    Vindictive's Avatar
    Joined
    Feb 2014
    Posts
    1,759
    Userbars
    10
    Thanks
    8
    Thanked
    709/450
    DL/UL
    32/0
    Mentioned
    312 times
    Time Online
    77d 22h 42m
    Avg. Time Online
    30m
    Interesting...thanks for posting that. I doubt ill go thru the trouble of using it to troll around. Ive been busy building up two mains and it takes alot of time between the two

  8. The Following User Says Thank You to Vindictive For This Useful Post:

    DarkByte (07-09-2014)

  9. #7
    Josh's Avatar
    Joined
    Dec 2011
    Posts
    415
    Userbars
    2
    Thanks
    25
    Thanked
    378/143
    DL/UL
    82/6
    Mentioned
    120 times
    Time Online
    17d 9h 48m
    Avg. Time Online
    5m
    Quote Originally Posted by Flame View Post
    Is it possible to make a cookie grabber link for roblox?
    Or any other programs that are similar like auto buyers?

    Paying for a program if it is possible for one to be made? I believe roblox is squirrel.

    How much would it cost?

    Anybody up for a challenge of it is one?
    Depends on many things. If the site allows you to post html (Or even images), its possible to get one on site. Otherwise, it would have to be offsite (@DarkByte 's example is offsite).

    Also depends on how their cookies are set up. Some are IP based. At the point, theres nothing you can do.
    Last edited by Josh; 07-10-2014 at 11:04 AM.

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •