WebApp Sec mailing list archives
RE: MSIE session cookies
From: "Richard M. Smith" <rms () computerbytesman com>
Date: Thu, 19 Jan 2006 09:38:17 -0500
Hooking into a instance of browser is possible also. I just don't know the details. However, I do know that you'll need to use the WebBrowser control instead: http://msdn.microsoft.com/library/default.asp?url=/workshop/browser/webbrows er/reference/ifaces/iwebbrowser2/iwebbrowser2.asp I'm sure that Google will find articles on how to hook into IE. Richard -----Original Message----- From: John Bond [mailto:john.r.bond () gmail com] Sent: Thursday, January 19, 2006 9:33 AM To: Richard M. Smith Cc: webappsec () securityfocus com Subject: Re: MSIE session cookies On 19/01/06, Richard M. Smith <rms () computerbytesman com> wrote:
You'll need to use the InternetExplorer.Application ActiveX control. Here's some sample code in Visual Basic: http://visualbasic.about.com/od/standalonevb6/l/blnewieinstance.htm After navigating to a Web page, cookies can be accessed using this expression: IE.Document.cookie
This is much more like what i want. Does the code have to open the browser or can it hookinto a instance which has already been opened. ------------------------------------------------------------------------- This List Sponsored by: Watchfire Watchfire's AppScan is the industry's first and leading web application security testing suite, and the only solution to provide comprehensive remediation tasks at every level of the application. See for yourself. Download AppScan 6.0 today. https://www.watchfire.com/securearea/appscansix.aspx?id=701300000003Ssh --------------------------------------------------------------------------
Current thread:
- MSIE session cookies John Bond (Jan 18)
- RE: MSIE session cookies Richard M. Smith (Jan 19)
- Re: MSIE session cookies John Bond (Jan 19)
- Re: MSIE session cookies Scott Hamm (Jan 19)
- Re: MSIE session cookies John Bond (Jan 19)
- RE: MSIE session cookies Richard M. Smith (Jan 19)
- Re: MSIE session cookies John Bond (Jan 19)
- RE: MSIE session cookies Richard M. Smith (Jan 19)
- Re: MSIE session cookies John Bond (Jan 19)
- Re: MSIE session cookies John Bond (Jan 19)
- RE: MSIE session cookies Richard M. Smith (Jan 19)
- RE: MSIE session cookies Richard M. Smith (Jan 19)
- <Possible follow-ups>
- RE: MSIE session cookies Zhou, Joe [HR] (Jan 19)
- RE: MSIE session cookies Sebastien Deleersnyder (Jan 19)
- RE: MSIE session cookies Labe Grzegorz DRS-BSI Centrala (Jan 19)
- RE: MSIE session cookies veille_audit (Jan 19)
- RE: MSIE session cookies Zhou, Joe [HR] (Jan 21)
- Message not available
- Re: MSIE session cookies John Bond (Jan 20)
- Message not available