https://google-gruyere.appspot.com/404750217065614595524464523861906391032/
Find a way to perform a Reflected XSS (i.e. generate a link that you would trick a user into clicking) on the Google-Gruyere website. The malicious script should pass the user's cookie to our cookie-harvesting script located at http://web.eecs.utk.edu/~akarnauc/get.php. The script is looking for input from the form cookie (i.e get.php?cookie=hello)