Hi, I found the vulnerable parameter, but can’t get the cookie… help please, I literally used the exact method to get the session hijacking cookie, but can’t get this one hm…?
i’ve tried using both these in script.js:
using my IP of ofc…
and my index.php is: