Deflate the cookies of the user if he clicked on the link?

I have the link to give the user pumped his cookies and passwords, desirebuy , profit. How to pump how to descriptivity? Or as an option to supply user keylogger if he clicked the link.
July 2nd 19 at 17:45
3 answers
July 2nd 19 at 17:47
Solution
coaches hackers never cease to amaze
where can I find info on this topic? - jaycee commented on July 2nd 19 at 17:50
July 2nd 19 at 17:49
Solution
Good news, everyone!

When a user clicks the link, his browser voluntarily send to the server all the cookies tied to that domain. No special action for "pumping" won't have to do. How to get cookies on the server - depends on your server language. Example for php, for python.

And more good news - usually cookies are not encrypted and transmitted in clear text.

However, there is a fly in the ointment - he does not send all cookies that are on this computer, but only those that are tied to the current domain.
More for beginners: https://ru.wikipedia.org/wiki/HTTP_cookie
More details in RFC, the wiki has the links.

And in order to install a Keylogger need to use some vulnerability in the user's browser, allowing execution of arbitrary code. Such vulnerability is not so rare to find, but they fairly quickly closed. Google zero-day browser exploit or something like that.
The phrase Good news, everyone! reminded another, once in his head the voice of Professor Putricide
- 'Good news, everyone! I think I perfected a plague that will destroy all life on Azeroth!
'
although it's taken from futurama. About what cookies my website will ship it to me has long been known, was meant both to pump other all)) Well, at least now know roughly in what direction to dig, perhaps you are aware of the forums which profile? - jaycee commented on July 2nd 19 at 17:52
: Other you browser would not voluntarily give him the security policy does not allow.
And so, they are either in the form of files in the daddy either in the form of records in the database, depending on the browser. - jaycee commented on July 2nd 19 at 17:55
About the forums, so immediately I remembered only antichat and xakep, but I've looked there, and in anticiate some botovodov SEOs sitting. Xakep even look too lazy.
I think all serious moved for a long time in i2p and other onion's - Austen.Thompson53 commented on July 2nd 19 at 17:58
: how to Google these "onion's", what to type in Google? Hack forum, I think that many of these on this request, the pseudo-forums, where you come and pick up what I asked in the question) - Austen.Thompson53 commented on July 2nd 19 at 18:01
: I've written just Google "onion sites" and got a few lists of sites. And lurke selection of references is. With i2p this same story. - jaycee commented on July 2nd 19 at 18:04
: thank you - Austen.Thompson53 commented on July 2nd 19 at 18:07
July 2nd 19 at 17:51
You can even do not deflate, but just to HUMILIATE the user when he clicked on the link. And get multiple profit.

Find more questions by tags HTTP CookiesjQueryJavaScript