Ethical Hacking

Learn to find vulnerabilities before the bad guys do! Gain real world hands on hacking experience in our state of the art hacking lab. Course designed and taught by expert instructors with years of penetration testing experience. 12 student maximum in every class. Certification attempt included in every package.
Computer Forensics Training at InfoSec Institute

Gain the in-demand skills of a certified computer examiner, learn to recover trace data left behind by fraud, theft, and cybercrime perpetrators. Discover the source of computer crime and abuse at your organization so that it never happens again. All of our class sizes are guaranteed to be 12 students or less to facilitate one-on-one interaction with one of our expert instructors.




Network Security Web-App-Sec
[Top] [All Lists]

Re: MSIE session cookies

Subject: Re: MSIE session cookies
Date: Thu, 19 Jan 2006 14:03:46 +0000
Hi,
Thank you all for your responses.  I have paros fiddler and webscarab
and think there all good tools.  However what i would really like to
do is read the cookies directly from memory.  I want to be able to
read cookies which have already been set.  possibly monitor when that
memory is accessed

Session cookies don't appear to be stored in files which implies they are
only held in RAM.
This is what i think i have tried lookingon google for anymore
infomation but i am unableto find any.

I think the simplist way to do this would be to patch the MSIE api
calls for cookies.

Any Ideas, pappers or usefull programs would be aprieciate


Richard


-------------------------------------------------------------------------
This List Sponsored by: Watchfire

Watchfire's AppScan is the industry's first and leading web application 
security testing suite, and the only solution to provide comprehensive 
remediation tasks at every level of the application. See for yourself. 
Download AppScan 6.0 today.

https://www.watchfire.com/securearea/appscansix.aspx?id=701300000003Ssh
--------------------------------------------------------------------------


<Prev in Thread] Current Thread [Next in Thread>