Cookie Stealing

[z3ro]

Is there a way to steal HttpOnly cookies??

[Phage]

I'm not quite sure what you are meaning with "http only cookies". From my point of view it's the same as any other regular cookie.

[z3ro]

I'm not quite sure what you are meaning with "http only cookies". From my point of view it's the same as any other regular cookie.

seriously!    yu dn't know what's an httpOnly cookie?


The HttpOnly attribute directs browsers to use cookies via the HTTP protocol only.  An HttpOnly cookie is not accessible via non-HTTP methods, such as calls via JavaScript ("document.cookie"), and therefore cannot be stolen easily via xss...

[Kulverstukas]

It's a regular cookie, but accessed only from HTTP. You can still steal it like any other cookie via sniffing the traffic.

[z3ro]

It's a regular cookie, but accessed only from HTTP. You can still steal it like any other cookie via sniffing the traffic.

sniffing the traffig>> OK..
But what about outsite network??

[Phage]

Ok kulverstukas that was also what i was thinking.