RE: MSIE session cookies

["Richard M. Smith" <rms () computerbytesman com>]

You'll need to use the InternetExplorer.Application ActiveX control.  Here's
some sample code in Visual Basic:

http://visualbasic.about.com/od/standalonevb6/l/blnewieinstance.htm 

After navigating to a Web page, cookies can be accessed using this
expression:

IE.Document.cookie

Richard

-----Original Message-----
From: John Bond [mailto:john.r.bond () gmail com] 
Sent: Thursday, January 19, 2006 9:04 AM
To: webappsec () securityfocus com
Subject: Re: MSIE session cookies

Hi,
Thank you all for your responses.  I have paros fiddler and webscarab and
think there all good tools.  However what i would really like to do is read
the cookies directly from memory.  I want to be able to read cookies which
have already been set.  possibly monitor when that memory is accessed

> Session cookies don't appear to be stored in files which implies they 
> are only held in RAM.
This is what i think i have tried lookingon google for anymore infomation
but i am unableto find any.

I think the simplist way to do this would be to patch the MSIE api calls for
cookies.

Any Ideas, pappers or usefull programs would be aprieciate


> Richard

-------------------------------------------------------------------------
This List Sponsored by: Watchfire

Watchfire's AppScan is the industry's first and leading web application
security testing suite, and the only solution to provide comprehensive
remediation tasks at every level of the application. See for yourself. 
Download AppScan 6.0 today.

https://www.watchfire.com/securearea/appscansix.aspx?id=701300000003Ssh
--------------------------------------------------------------------------

-------------------------------------------------------------------------
This List Sponsored by: Watchfire

Watchfire's AppScan is the industry's first and leading web application 
security testing suite, and the only solution to provide comprehensive 
remediation tasks at every level of the application. See for yourself. 
Download AppScan 6.0 today.

https://www.watchfire.com/securearea/appscansix.aspx?id=701300000003Ssh
--------------------------------------------------------------------------