-
Expert Member
Re: Cookie Testing
Hi ,
I found few details foe you on Cookie testing tool from the websites
The Cookie Tools v0.3 -- first public release
Included tools:
cookiesniffer
cookiesniffer is a simple and powerful cookie sniffer that recognizes
(through heuristics) and reconstructs (through libnids) new and
existing HTTP connections, parsing any valid or partially valid HTTP
message. The output is a set of files containing the gathered
information with time-stamps in a format that can be trivially
searched and parsed with standard UNIX tools such as grep, awk, cut
and sed. It supports wireless (AP_DLT_IEEE802_11) networks.
Analyzers
This set of Bash scripts help you to analyze quickly the logs of cookiesniffer.
Cookieserver
With cookieserver you can impersonate the cookies of someone else in your browser using the logs of cookiesniffer (in few seconds). This
attack is also called "side-jacking", "cookie replay attack" and "HTTP
session hijacking" but probably I'm missing other fancy names. This is
something known from ten years but that is still (too much) effective.
This project is released under license GPL version 2.
Download
xenion HQ » The Cookie Tools
• cookietools 0.4 (latest)
• cookietools 0.3
A list of public vulnerable web services is available here:
The cookie replay attack: some vulnerable and secure web services
Hope this will help you,
Cheers,
Sridevichitthu
Posting Permissions
- You may not post new threads
- You may not post replies
- You may not post attachments
- You may not edit your posts
-
Forum Rules