Hacking Cookies in Modern Web Applications and Browsers
https://www.ispeech.org/text.to.speech
Since cookies store sensitive data (session ID, CSRF token, etc.) they are interesting from an attacker's point of view. As it turns out, quite many web applications (including sensitive ones like bitcoin platforms) have cookie related vulnerabilities, that lead, for example, to user impersonation, remote cookie tampering, XSS and more.
At DeepSec 2015 Dawid Czagan (Silesia Security Lab) explained what to do when tackling cookies in modern browsers.
Likes: 0
Viewed:
source
Gloss