Session Hijacking

Loading...

Flash Player 9 (or above) is needed to view presentations.
We have detected that you do not have it on your computer. To install it, go here.

0 comments

Post a comment

    Post a comment
    Embed Video
    Edit your comment Cancel

    Favorites, Groups & Events

    Session Hijacking - Presentation Transcript

    1. Session Hijacking
    2. Create a new account
    3. Excellent
    4. Find Your Account Summary Screen
    5. Analyze the Cookies you Send Name Value 20214200UserName foo%40foo%2Ecom 20214200FirstName Michael BIGipServerSecure2.TEAM.WebHosting 1852316332.20480.0000 LastURL http%3A%2F%2Fwww%2Esite%2Ecom ShopperID 193096346 ASPSESSIONIDQAASCCQS GKEMINACKANKBNLFJAPKNLEM UserID 2366239
    6. Start Removing Cookies Cookie: 20214200UserName=foo%40foo%2Ecom; 20214200FirstName=Michael; BIGipServerSecure2.TEAM.WebHosting=1852316332.20480.0000 LastURL=http%3A%2F%2Fwww%2Esite%2Ecom; ShopperID=193096346; ASPSESSIONIDQAASCCQS=GKEMINACKANKBNLFJAPKNLEM; UserID=2366239
    7. I still have access
    8. Remove the next cookie Cookie: 20214200UserName=foo%40foo%2Ecom; 20214200FirstName=Michael; BIGipServerSecure2.TEAM.WebHosting=1852316332.20480.0000 LastURL=http%3A%2F%2Fwww%2Esite%2Ecom; ShopperID=193096346; ASPSESSIONIDQAASCCQS=GKEMINACKANKBNLFJAPKNLEM;
    9. Access still granted
    10. Remove the next cookie Cookie: 20214200UserName=foo%40foo%2Ecom; 20214200FirstName=Michael; BIGipServerSecure2.TEAM.WebHosting=1852316332.20480.0000 LastURL=http%3A%2F%2Fwww%2Esite%2Ecom; ShopperID=193096346 ;
    11. Boom! I get logged out
    12. Let’s change the cookie value
      • Cookie: BIGipServerSecure2.TEAM.WebHosting=1852316332.20480.0000; ShopperID= 193096346 ;
      • Cookie: BIGipServerSecure2.TEAM.WebHosting=1852316332.20480.0000; ShopperID= 193096345 ;
    13. You may now call me Emily
    14. What would you do here?
      • ShopperID= MTkzMDk2MzQ2 ;
      • ShopperID= 8ae5abacf90dd1f887154468f71bb5fe ;
      • ShopperID= a1a54996391f88e632f0c88c37c56ac709fb449e40f7737adf65fa3ce8e3ce7a ;

    + Caleb SimaCaleb Sima, 2 years ago

    custom

    120 views, 0 favs, 0 embeds more stats

    More info about this document

    © All Rights Reserved

    Go to text version

    • Total Views 120
      • 120 on SlideShare
      • 0 from embeds
    • Comments 0
    • Favorites 0
    • Downloads 0
    Most viewed embeds

    more

    All embeds

    less

    Flagged as inappropriate Flag as inappropriate
    Flag as inappropriate

    Select your reason for flagging this presentation as inappropriate. If needed, use the feedback form to let us know more details.

    Cancel
    File a copyright complaint
    Having problems? Go to our helpdesk?

    Categories