Hack Forums

ok after watching a video about cross site scrypting i was wondering exactly what tools i need and if any one on this site can link me to some good tuts about it

You don't need tools. You just need to know the language your are using to XXS. Usually its Javascript. I've seen some PHP ones though.

ok im kinda screwed i dont know java it looks complicated to learn but yet again so did vb back in college lol

Java and Javascript are too completely different things. You need to know Javascript.

You need to know at least one server side language and one client side. I.e., php and javascript. Xss attacks are really only useful in the area of stealing cookies. (Very nice if for example the site keeps the php `session id` in a cookie). From there you need a bit (very little) javascript to redirect the targets to your site and a little to pass the cookie a a pages argument then some php to simply take the cookie and save it to a text file.