Ok i set up my apache on php and my cookie stealer is working
So next step,i assume, is to send the "boss" a message containing an XSS.
Ok, I tried many different XSS redirecting him and his cookie to my server, but nothing is logged.
??????
ANy help????





