WebApp Sec mailing list archives

Re: Cookie poisoning without XSS


From: Kanatoko <anvil () jumperz net>
Date: Wed, 30 Aug 2006 14:57:13 +0900


Can anyone describe a method of cookie
poisoning even without XSS.

Use Cookie Monster Bug.

-- 
Kanatoko<anvil () jumperz net>
Open Source WebAppFirewall
http://guardian.jumperz.net/


Current thread: