CookieCatcher is an open source application that allows you perform session hijacking (cookie stealing) through XSS (cross site scripting).