Security Basics mailing list archives

RE: MSIE session cookies


From: "Sebastien Deleersnyder" <sebastien.deleersnyder () ascure com>
Date: Thu, 19 Jan 2006 12:17:47 +0100

Hi,

You can easily do this with tools like e.g. WebScarab (www.owasp.org).
You intercept all traffic an can change whatever you like, including the
cookies.

Regards, 

Seba

-----Original Message-----
From: John Bond [mailto:john.r.bond () gmail com] 
Sent: woensdag 18 januari 2006 15:43
To: security-basics () securityfocus com; webappsec () securityfocus com
Subject: MSIE session cookies

Does anyone no of a way i can read MSIE (v6) session cookies and
possibly change them. i.e. where are they stored.  is there a program
which does this already.  is there an API which would allow this

any help appriciated.

------------------------------------------------------------------------
-
This List Sponsored by: Watchfire

Watchfire's AppScan is the industry's first and leading web application
security testing suite, and the only solution to provide comprehensive
remediation tasks at every level of the application. See for yourself. 
Download AppScan 6.0 today.

https://www.watchfire.com/securearea/appscansix.aspx?id=701300000003Ssh
------------------------------------------------------------------------
--


---------------------------------------------------------------------------
EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE
The Norwich University program offers unparalleled Infosec management
education and the case study affords you unmatched consulting experience.
Tailor your education to your own professional goals with degree
customizations including Emergency Management, Business Continuity Planning,
Computer Emergency Response Teams, and Digital Investigations.

http://www.msia.norwich.edu/secfocus
---------------------------------------------------------------------------


Current thread: