RE: Modifing non-persistent cookies

[Luke Fraser <LFraser () soltrus com>]

Could you use a personal proxy (WebScarab, Paros, etc) to change the
response from the server that sets the cookie?  Then you'd only have to do
it once.

Or you could use this Firefox Extension:
http://addneditcookies.mozdev.org/index.html

Luke 

-----Original Message-----
From: Jason binger [mailto:cisspstudy () yahoo com] 
Sent: Sunday, December 11, 2005 5:48 PM
To: webappsec () securityfocus com
Subject: Modifing non-persistent cookies

I am looking for an application that can modify a non-persistent cookies
value permanently (while the browser is open).

I am testing a web app where a UserID=Number is set in the browser. If I
change this number to another ID I can access other users functions, but I
don't want to have to manually change it with each request using a web
proxy.

Does anyone have some other ideas?

Cheers

__________________________________________________
Do You Yahoo!?
Tired of spam?  Yahoo! Mail has the best spam protection around
http://mail.yahoo.com