Re: modify non-persistent cookies

In addition to using one of the free proxy-based tools mentioned by others (WebProxy, Achilles, WebSleuth, etc.) you can use your web browser to modify any aspect of the document object model using Javascript from the URL bar. Just load the page, and type this into the URL bar:

javascript: alert(document.cookie);

This will pop up a box with the current cookie information in it. (Big suprise.) Similarly, to change the cookie you can use something like this:

javascript: document.cookie='CookieName=CookieValue';

(Those are directions for IE. Netscape/Mozilla use javascript:// for the URL format I think.) The next time you visit the site (by hitting back for instance), your new exciting cookie values will be used.

Kevin Spett
SPI Labs
http://www.spidynamics.com/

• Original Message ----- From: "mono toy" <mono@spurious.biz> To: "Webappsec@Securityfocus. Com" <webappsec@securityfocus.com> Sent: Tuesday, December 17, 2002 5:55 AM Subject: modify non-persistent cookies

> dear list,
Received on Wed Dec 18 13:48:34 2002

Do you need help?

In addition to our free technical library, Pantek provides professional IT services to companies who utilize Open Source software: Learn more about Pantek's Technical Support offerings Place an order for 24/7/365 Technical Support here Learn more about Pantek, who we are, and what we do Chat with a Live Operator Related securityfocus.com Links bugtraq certification focus-bsd focus-ids focus-ih focus-linux focus-ms focus-sun focus-unix-other focus-virus forensics incidents libnet linux-secnews ms-secnews pen-test secpapers secprog sectools secureshell security-basics securityjobs sf-news vuln-dev webappsec Request more information about Pantek