EvilZone
Hacking and Security => Hacking and Security => : z3ro July 27, 2012, 10:59:57 AM
-
Is there a way to steal HttpOnly cookies??
-
I'm not quite sure what you are meaning with "http only cookies". From my point of view it's the same as any other regular cookie.
-
I'm not quite sure what you are meaning with "http only cookies". From my point of view it's the same as any other regular cookie.
seriously! :o yu dn't know what's an httpOnly cookie?
The HttpOnly attribute directs browsers to use cookies via the HTTP protocol only. An HttpOnly cookie is not accessible via non-HTTP methods, such as calls via JavaScript ("document.cookie"), and therefore cannot be stolen easily via xss...
-
It's a regular cookie, but accessed only from HTTP. You can still steal it like any other cookie via sniffing the traffic.
-
It's a regular cookie, but accessed only from HTTP. You can still steal it like any other cookie via sniffing the traffic.
sniffing the traffig>> OK..
But what about outsite network??
-
Ok kulverstukas that was also what i was thinking.