0

enter image description here

I am facing a session cookie hijacking vulnerability please refer the attached

image. When i put these cookie in another browser which i simply type the domain like http://example.com and add the copy cookie using the extension then simply i change the url to example.com/dashboard then user dashboard automatically open just because of copy cookie all have the same label only value is different.

1

The value of the cookie needs to be kept a secret, otherwise as you point out, someone can 'hijack' the session and perform actions as the original user.

Under normal circumstances an attacker wouldn't be able to get the value of this cookie from your browser, if they can, then they're into your machine, and can probably do what they like. Game over.

That leaves man-in-the-middle attacks as a way to get the value of this cookie, and you avoid those by running the site over HTTPS, so that the value of the cookies is encrypted in transit, and only readable by the client and the server.

  • The session cookie is also marked as HttpOnly, so cannot be read by JavaScript (e.g. an XSS exploit couldn't be used to exfiltrate session cookie values) – gapple Mar 5 '19 at 8:25

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.