Cookie Testing

Can any one please guide me, which are the tools for the Cookie Testing

Hi ,

I found few details foe you on Cookie testing tool from the websites

The Cookie Tools v0.3 -- first public release


[B]Included tools:[/B]

[B]cookiesniffer [/B]

cookiesniffer is a simple and powerful cookie sniffer that recognizes
(through heuristics) and reconstructs (through libnids) new and
existing HTTP connections, parsing any valid or partially valid HTTP
message. The output is a set of files containing the gathered
information with time-stamps in a format that can be trivially
searched and parsed with standard UNIX tools such as grep, awk, cut
and sed. It supports wireless (AP_DLT_IEEE802_11) networks.

[B]Analyzers[/B]
This set of Bash scripts help you to analyze quickly the logs of cookiesniffer.

[B]Cookieserver[/B]

With cookieserver you can impersonate the cookies of someone else in your browser using the logs of cookiesniffer (in few seconds). This
attack is also called "side-jacking", "cookie replay attack" and "HTTP
session hijacking" but probably I'm missing other fancy names. This is
something known from ten years but that is still (too much) effective.

This project is released under license GPL version 2.

[B]Download[/B]

[url=http://xenion.antifork.org/cookietools/index.html]xenion HQ » The Cookie Tools[/url]

• cookietools 0.4 (latest)
• cookietools 0.3


A list of public vulnerable web services is available here:
[url=http://xenion.antifork.org/cookietools/lista/index.html]The cookie replay attack: some vulnerable and secure web services[/url]

Hope this will help you,

Cheers,
Sridevichitthu

Thanks a lot for the information,If you have any links where i can study the basic
of Cookies Testing.

Hi ,

Have found these two useful links for you

[url=http://palisade.plynt.com/issues/2007Mar/internet-cookies/]Back to Basics: Internet Cookies : Palisade[/url]
[url=http://www.stonehenge.com/merlyn/WebTechniques/col61.html]Basic cookie management (May 01)[/url]

Happy Learning,
Sridevichitthu

[QUOTE=impradee2008;31783]Can any one please guide me, which are the tools for the Cookie Testing[/QUOTE]

HTTP watch can help out here.

[QUOTE=impradee2008;31783]Can any one please guide me, which are the tools for the Cookie Testing[/QUOTE]

I don't think you need any tool for cookie testing, today browsers are so much sophisticated to tell you every information about cookie.

If your aim is security testing using cookie poising then you need a tool.

Thanks.

I am new in testing profile-> I have a project where the user have to provide the notification of 24 hours ....(that for 24 hours his guest appearence would be saved in the cookie...and when he visit again the site then the time reset again for 24 hours) so how would i test it in terms of cookie.

[QUOTE=aman.doonit;55943]I am new in testing profile-> I have a project where the user have to provide the notification of 24 hours ....(that for 24 hours his guest appearence would be saved in the cookie...and when he visit again the site then the time reset again for 24 hours) so how would i test it in terms of cookie.[/QUOTE]

Talk to your developers, that value will be definitely saved in DB, not in cookie.

Thanks.