Cookie Poisoning
Cookie Poisoning
ghost | 13163 Reads | One of the major mistakes which web masters make is considering that all data they set stay the same. These things are usually harmless to them such as cookies and hidden form details.
To start with I am going to show how the web master sets his data for his vulnerable CMS.
He begins with a form :-
[username] Username [********] Password [Button] Submit button
Once the form is submitted, the backend PHP which recieves the $_POST is as follows.
Right, so now we have checked the database for for a the username and password and set the cookie. Presuming our attacker’s username and password are correct then the cookie will be something of the folowing
UID = “tom:password123”.
Later on our attack visits a protected page and his cookie is checked with this code.
Now, if the cookie stays the same the SQL query is safe. However, if you change the cookie you can use it as simply as a basic SQL injection.
Right, now we have see how basic cookie poisoning works with SQL Injection. This can also be utilised in all other major web vulnerabilities.
ghost 18 years ago
Nice article. This proves yet again how important it is to consider all data not filtered as tainted.
ghost 18 years ago
bacause of this i learn something, therefore it forfils its pupose :D
good article mozzer
ghost 18 years ago
Yes, good article, you always gotta be sure you are filtering every possible string.
ghost 18 years ago
Man this is good stuff. ;) for some reason i wasnt even thinkin about it like that :whoa: I know that is a security vulnerability i wouldve let slide by :@ but now.. now i feel like i can do so much more :evil: oh yeaah thas right
good stuff man, real good stuff
ghost 15 years ago
ok so…. im doin basic challenge 20, and i cant quite figure this out. after looking at this article (well written btw) i thought i knew how to do it. but whatever i tried, i couldnt figure anything out. can i pm someone?
ghost 15 years ago
ok so…. im doin basic challenge 20, and i cant quite figure this out. after looking at this article (well written btw) i thought i knew how to do it. but whatever i tried, i couldnt figure anything out. can i pm someone?
stealth- 15 years ago
Amazing article for basic 20, well written and doesn't give too much away. We need more articles like this!
ghost 14 years ago
awsome article, really explains things without making it like hello skiddie take this and paste there. :love::love: very well written ty