rapid7/metasploit-framework — pull request #353 by johnnykv (2012-04-28 22:47:52+00:00)
Title: Cookie logger

As suggested by wchen-r7 capability has been added to save to disc. (using store_loot)

---
A module to log cookies from sites vulnerable to XSS.

From the description:

This module runs a webserver that serves a piece of javascript
which will transmit cookies back to metasploit. In an attempt
to evade analysis and Intrusion Detection Systems this module has
an option to obfuscate the served javascript.
To use this module the following javascript must be injected on a
website vulnerable to XSS: