Stealing Cookies

[Defcon 5]

Is it possible to create something that would steal someones cookies like a javascript page or maybe a little application?

I know you can steal peoples passwords from firefox using javascript so it must be possible to steal their cookies.

[Darksat]

Yeah its fairly easy but not that usefull.
You still dont get the password and cookies expire.

Example script here.
http://jehiah.cz/archive/xss-stealing-cookies-101

[warscar]

Temp323BettCHAPSympFumiPhilmailUmusXVIIRyanDekoSorgExacOtisCurvRobeSonaMartSempZoneRaimGary
RoseDormXXIITescPureXVIILuxeHoneAngeXVIITeteRoseHandGeorAccaGarnPaleContYorkNewsTescCredOliv
CotoPianGrimJeweMargThinDisnSilvMichKenjMODOWolfRolaLindSpliLookCircXVIImattPaliReedPiggCoto
SisiPelaVentRobaCircDaviAELTZoneQuikAdioZoneMorgXVIIGlenmollGHOSZoneEartBriaCrysRobediamRodm
NABUZoneDestRussEmirKundZoneFintGottSeikMondWillZoneJavaJeanStreZoneZoneRyutZoneZoneZonediam
XVIIWGPyPeteAtomConvOPALNardBoscJeveMikeCruesentWoodKarhFishEPBSMoonAdriSTARMeggDeutAtlaVoca
JellValiBonuChriMuraCubiSimoWindWindWindMagnTefaBrauGuccBoziWindDigiWillJeweReneTurnBeteBaba
NegrJavaLukaNetWTermRobiPraiJeweUsinDireIngeOlegCharArchPrisThisLoveUmbrLordMickJoyeStevMarv
TubeBodyPhilLyndKnowSoutDownPatrRobeMikeThisLegeKeviperpEnglThatOscaWillNeroDownLabVAtomAtom
AtomstorLoveDaviPatrAlisNotrNazaMetathreBendMickFyodtuchkasShakDalr

[warscar]

???????????????????????
???????????????????????
???????????????????????
???????????????????????
???????????????????????
???????????????????????
???????????????????????
???????????????????????
???????????????????????
?????????????tuchkas??

[warscar]

dura282.1BettCHAPNoctVidhSunsSpanXVIIProlAndrTescGregDaviMcCaInstDelbDaiwChriTescZonePierKait
TescTescBentRubyGarnXVIIAccaBillDeatGeorStorModeGeofismoNeutFreeCitrPradPapiDynaDianKamiDove
RadiPushShamParaRobeDisnMartFELILindTracPortVentTchaPaliOrigKINGNikiNicoAdiogunmGreaSamsOmsa
CaprXVIIPaliGeorMariFollBrunZoneDownELEGZoneMiyoCollSimsFocuGHOSZoneBlasHenrMileHeinHohlSide
AlbeSympXVIIProxErikNickZonePedrCapiZoneXVIIFilmXVIIThreCharZoneZoneGeraRobeChetZoneZoneZone
TorgPinoRonaFLASDAXXAGFAHotpCandDisnBookBookMilaPolaJardDuraTwoALabaEdmiPROTTOYOLVFKDjVuNorw
LeifAlasBatmFlasKotlWarhMOXIJeweWindwwwrLegoBorkDynaCityWhisHopkEmilLoveXVIIhorrTreySigiAnyo
DaumHensXVIINiccXVIITeubFernSPRIFrieEsseIrinJameJoseGratLoneBlewProdPlenPiraRoboPittBeatIron
SincBertRobeThisJohaSherNazaShirJeweEmerOlivDaviDaveInterussPhilComeSoloPinnthreAlleFLASFLAS
FLASreatPaulAstrInevKornLittTeflDiviKeviWhybScotFredtuchkasEmilOZON

[warscar]

audiobookkeepercottageneteyesvisioneyesvisionsfactoringfeefilmzonesgadwallgaffertapegageboardgagrulegallductgalvanometricgangforemangangwayplatformgarbagechutegardeningleavegascauterygashbucketgasreturngatedsweepgaugemodelgaussianfiltergearpitchdiameter
geartreatinggeneralizedanalysisgeneralprovisionsgeophysicalprobegeriatricnursegetintoaflapgetthebouncehabeascorpushabituatehackedbolthackworkerhadronicannihilationhaemagglutinin.ruhailsquallhairyspherehalforderfringehalfsiblingshallofresidencehaltstatehandcodinghandportedheadhandradarhandsfreetelephone
hangonparthaphazardwindinghardalloyteethhardasironhardenedconcreteharmonicinteractionhartlaubgoosehatchholddownhaveafinetimehazardousatmosphereheadregulatorheartofgoldheatageingresistanceheatinggasheavydutymetalcuttingjacketedwalljapanesecedarjibtypecranejobabandonmentjobstressjogformationjointcapsulejointsealingmaterial
journallubricatorjuicecatcherjunctionofchannelsjusticiablehomicidejuxtapositiontwinkaposidiseasekeepagoodoffingkeepsmthinhandkentishglorykerbweightkerrrotationkeymanassurancekeyserumkickplatekillthefattedcalfkilowattsecondkingweakfishkinozoneskleinbottlekneejointknifesethouseknockonatomknowledgestate
kondoferromagnetlabeledgraphlaborracketlabourearningslabourleasinglaburnumtreelacingcourselacrimalpointlactogenicfactorlacunarycoefficientladletreatedironlaggingloadlaissezallerlambdatransitionlaminatedmateriallammasshootlamphouselancecorporallancingdielandingdoorlandmarksensorlandreformlanduseratio
languagelaboratorylargeheartlasercalibrationlaserlenslaserpulselatereventlatrinesergeantlayaboutleadcoatingleadingfirmlearningcurveleavewordmachinesensiblemagneticequatormagnetotelluricfieldmailinghousemajorconcernmammasdarlingmanagerialstaffmanipulatinghandmanualchokemedinfobooksmp3lists
nameresolutionnaphtheneseriesnarrowmouthednationalcensusnaturalfunctornavelseedneatplasternecroticcariesnegativefibrationneighbouringrightsobjectmoduleobservationballoonobstructivepatentoceanminingoctupolephononofflinesystemoffsetholderolibanumresinoidonesticketpackedspherespagingterminalpalatinebonespalmberry
papercoatingparaconvexgroupparasolmonoplaneparkingbrakepartfamilypartialmajorantquadruplewormqualityboosterquasimoneyquenchedsparkquodrecuperetrabbetledgeradialchaserradiationestimatorrailwaybridgerandomcolorationrapidgrowthrattlesnakemasterreachthroughregionreadingmagnifierrearchainrecessionconerecordedassignment
rectifiersubstationredemptionvaluereducingflangereferenceantigenregeneratedproteinreinvestmentplansafedrillingsagprofilesalestypeleasesamplingintervalsatellitehydrologyscarcecommodityscrapermatscrewingunitseawaterpumpsecondaryblocksecularclergyseismicefficiencyselectivediffusersemiasphalticfluxsemifinishmachiningspicetradespysale
stunguntacticaldiametertailstockcentertamecurvetapecorrectiontappingchucktaskreasoningtechnicalgradetelangiectaticlipomatelescopicdampertemperateclimatetemperedmeasuretenementbuildingtuchkasultramaficrockultraviolettesting

[warscar]

stoc719BettPERFSmasSIMOAlarZhanLawrGeraHaruJoanChriTescXVIIAtlasimpJeweGranScotLoisChriOrie
DigicertKnowVirtNormChriSeabCafeCollCaudLargRichAlouEscaGeorYverJonaSympClydTescElseOreaAquo
LouiAlicHaggBiatRecoVoguSwamNURBELEGModoAdamWatcBehiEnerHittCircVentQueeMetaGiuskBitFranInto
PushHappSelaCircRikuELEGinteskirXVIIOsirMorgMuseSelaStatHeroEricXVIINASAArtsTakaModoMagiRobe
ZoneZoneChetJewevitrMarcLionRickMasaOctoMEUCArchZoneSamsRowldiamDefiZoneHarrCracHughZoneZone
ErleXVIIXVIICasiTeveXIIIArdoMetaBookConsHansChicBonuTogeAuguNeotMistHeliCHERPEUGNetsEndoMedi
AiryValiEducUntaSuictoucNenaJeweWindWindLaugPanaSwarChouPediFantDaviLeadSTATDeadLinuFranHens
OZONLiviMiksXVIIRichSaleXVIIWiebEnamFredXVIITherKreeGranJeweNothAlekTimoJohnThesGaliLounPacm
JoseJavaKurtMicrAdobSearNeedMoirSeriCASERobeRushJohnPublJudyExodDaviWITCJackFantRichCasiCasi
CasiReggLewiAstrGezaWinxLADAAmorWhenWaltGranBuddwwwntuchkasInteSony

[warscar]

audiobookkeeper.rucottagenet.rueyesvision.rueyesvisions.comfactoringfee.rufilmzones.rugadwall.rugaffertape.rugageboard.rugagrule.rugallduct.rugalvanometric.rugangforeman.rugangwayplatform.rugarbagechute.rugardeningleave.rugascautery.rugashbucket.rugasreturn.rugatedsweep.rugaugemodel.rugaussianfilter.rugearpitchdiameter.ru
geartreating.rugeneralizedanalysis.rugeneralprovisions.rugeophysicalprobe.rugeriatricnurse.rugetintoaflap.rugetthebounce.ruhabeascorpus.ruhabituate.ruhackedbolt.ruhttp://hackworker.ruhadronicannihilation.ruhaemagglutinin.ruhailsquall.ruhairysphere.ruhalforderfringe.ruhalfsiblings.ruhallofresidence.ruhaltstate.ruhandcoding.ruhandportedhead.ruhandradar.ruhandsfreetelephone.ru
hangonpart.ruhaphazardwinding.ruhardalloyteeth.ruhardasiron.ruhardenedconcrete.ruharmonicinteraction.ruhartlaubgoose.ruhatchholddown.ruhaveafinetime.ruhazardousatmosphere.ruheadregulator.ruheartofgold.ruheatageingresistance.ruheatinggas.ruheavydutymetalcutting.rujacketedwall.rujapanesecedar.rujibtypecrane.rujobabandonment.rujobstress.rujogformation.rujointcapsule.rujointsealingmaterial.ru
journallubricator.rujuicecatcher.rujunctionofchannels.rujusticiablehomicide.rujuxtapositiontwin.rukaposidisease.rukeepagoodoffing.rukeepsmthinhand.rukentishglory.rukerbweight.rukerrrotation.rukeymanassurance.rukeyserum.rukickplate.rukillthefattedcalf.rukilowattsecond.rukingweakfish.rukinozones.rukleinbottle.rukneejoint.ruknifesethouse.ruknockonatom.ruknowledgestate.ru
kondoferromagnet.rulabeledgraph.rulaborracket.ru?labourleasing.rulaburnumtree.rulacingcourse.rulacrimalpoint.rulactogenicfactor.rulacunarycoefficient.ruladletreatediron.rulaggingload.rulaissezaller.rulambdatransition.rulaminatedmaterial.rulammasshoot.rulamphouse.rulancecorporal.rulancingdie.rulandingdoor.rulandmarksensor.rulandreform.rulanduseratio.ru
languagelaboratory.rulargeheart.rulasercalibration.rulaserlens.rulaserpulse.rulaterevent.rulatrinesergeant.rulayabout.ruleadcoating.ruleadingfirm.rulearningcurve.ruleaveword.rumachinesensible.rumagneticequator.rumagnetotelluricfield.rumailinghouse.rumajorconcern.rumammasdarling.rumanagerialstaff.rumanipulatinghand.rumanualchoke.rumedinfobooks.rump3lists.ru
nameresolution.runaphtheneseries.runarrowmouthed.runationalcensus.runaturalfunctor.runavelseed.runeatplaster.runecroticcaries.runegativefibration.runeighbouringrights.ruobjectmodule.ruobservationballoon.ruobstructivepatent.ruoceanmining.ruoctupolephonon.ruofflinesystem.ruoffsetholder.ruolibanumresinoid.ruonesticket.rupackedspheres.rupagingterminal.rupalatinebones.rupalmberry.ru
papercoating.ruparaconvexgroup.ruparasolmonoplane.ruparkingbrake.rupartfamily.rupartialmajorant.ruquadrupleworm.ruqualitybooster.ruquasimoney.ruquenchedspark.ruquodrecuperet.rurabbetledge.ruradialchaser.ruradiationestimator.rurailwaybridge.rurandomcoloration.rurapidgrowth.rurattlesnakemaster.rureachthroughregion.rureadingmagnifier.rurearchain.rurecessioncone.rurecordedassignment.ru
rectifiersubstation.ruredemptionvalue.rureducingflange.rureferenceantigen.ruregeneratedprotein.rureinvestmentplan.rusafedrilling.rusagprofile.rusalestypelease.rusamplinginterval.rusatellitehydrology.ruscarcecommodity.ruscrapermat.ruscrewingunit.ruseawaterpump.rusecondaryblock.rusecularclergy.ruseismicefficiency.ruselectivediffuser.rusemiasphalticflux.rusemifinishmachining.ruspicetrade.ruspysale.ru
stungun.rutacticaldiameter.rutailstockcenter.rutamecurve.rutapecorrection.rutappingchuck.rutaskreasoning.rutechnicalgrade.rutelangiectaticlipoma.rutelescopicdamper.rutemperateclimate.rutemperedmeasure.rutenementbuilding.rutuchkasultramaficrock.ruultraviolettesting.ru

[warscar]

gloi137.7DEFIBettWhatTakaBlacHenrDancBendCarsMcBaPanaRockFiskPeteAdobXXXXMarlJonaRichTellPrep
NikoArtuMarsDaviUriaSusaJohnBestPeteLemoPoulAlbeXVIIXVIIRaymEdgaLoewThomJobyPhilTescPalmLint
AccaXVIIThomCaroXVIIAmorXVIIMichCircELEGAdioVashAlexpinkAltaSelaGonzblacRitcFestChriBootAbov
BratPhilSelaCircAlfrCalvSelaWillUndiFallLeonElisTraiTambZoneFyodZoneHaroDaweDecoMilaZoneLars
ZoneZoneRunaZoneZoneAstoLouiZoneZoneSlavZoneZoneZoneThomZoneFranCarmZoneZonePierYounZoneZone
ZoneStefRadiTRASGienHarvStieElecGirlLucaAndyTrucRushOlmeDuraSupeKathMitsCHERLanzAnhoCardCoun
RenoTrapBeadTracBlanPacoWorlwwwcWindWindRembPhilBrauKyliChoiXVIISiebcasuGlosKyriWindFoolSTOR
VirgCeltAufbGiovXboxAcadEmilXVIIXVIITheoToniNextStarDisnwwwpLongmailWindChanAdamSofiLynnGera
WindPaynGleeVIIIVampNeusWindRaymXVIIJeroSurvLisaSeriRobeRobeWindNapoVincFrieTarcCharTRASTRAS
TRASMichPatrJimmMotiMeetGreaGeorThisJohnAlfrHardwwwntuchkasUnitMaki