Login
From:
PortSwigger Research
(Uncensored)
subscribe
Stealing HttpOnly cookies with the cookie sandwich technique | PortSwigger Research
https://portswigger.net/research/stealing-httponly-cookies-with-the-cookie-sandwich-technique
links
backlinks
In this post, I will introduce the "cookie sandwich" technique which lets you bypass the HttpOnly flag on certain servers. This research follows on from Bypassing WAFs with the phantom $Version cookie
Roast topics
Find topics
Find it!
