RE: MSIE session cookies

["Richard M. Smith" <rms () computerbytesman com>]

Client side JavaScript can access session cookies via the document.cookie
property.  External programs can also access the document.cookie property
using the the IE COM interface.

Session cookies don't appear to be stored in files which implies they are
only held in RAM.

Richard 

-----Original Message-----
From: John Bond [mailto:john.r.bond () gmail com] 
Sent: Wednesday, January 18, 2006 9:43 AM
To: security-basics () securityfocus com; webappsec () securityfocus com
Subject: MSIE session cookies

Does anyone no of a way i can read MSIE (v6) session cookies and possibly
change them. i.e. where are they stored.  is there a program which does this
already.  is there an API which would allow this

any help appriciated.

-------------------------------------------------------------------------
This List Sponsored by: Watchfire

Watchfire's AppScan is the industry's first and leading web application
security testing suite, and the only solution to provide comprehensive
remediation tasks at every level of the application. See for yourself. 
Download AppScan 6.0 today.

https://www.watchfire.com/securearea/appscansix.aspx?id=701300000003Ssh
--------------------------------------------------------------------------

-------------------------------------------------------------------------
This List Sponsored by: Watchfire

Watchfire's AppScan is the industry's first and leading web application 
security testing suite, and the only solution to provide comprehensive 
remediation tasks at every level of the application. See for yourself. 
Download AppScan 6.0 today.

https://www.watchfire.com/securearea/appscansix.aspx?id=701300000003Ssh
--------------------------------------------------------------------------