I'm looking for a script (may have to be written in PHP) that can utilize cross site tracing to successfully steal HttpOnly cookies on the vulnerable website and log them to a .txt file on the site hosting the script. The script will be utilizing a non-persistent XSS vulnerability on my website. To steal HttpOnly cookies, requires a more sophisticated form of XSS attack.