I'm pretty sure notepad would do the work just fine to 'manipulate' a
cookie, since a cookie is just a simple text file. However the server who
served it may see it changed and rewrite it or consider it corrupt, it
depends I guess.

But most cookies are just usernames, timestamps and poorly written password
hashes, not much to see or manipulate.

-c-

-----Original Message-----
From: Paul Malachowski [mailto:paulsoftwaregw.com]
Sent: Tuesday, October 02, 2001 5:01 PM
To: 'Mark Challender'; 'Peter Holland'; focus-mssecurityfocus.com
Subject: RE: C is for Cookie...

When you say 'manipulate the data inside of the cookie' where are you trying
to do the work? On the server (accessing the cookie data send by the
client)? Or on a proxy? Or at the client to look at the cookie data set by
all web sites the user has visited?

PaulM
mailto:paulsoftwaregw.com
http://www.softwaregw.com

-----Original Message-----
From: Mark Challender [mailto:MarkCmtbaker.wednet.edu]
Sent: Tuesday, October 02, 2001 3:10 PM
To: 'Peter Holland'; 'focus-mssecurityfocus.com'
Subject: RE: C is for Cookie...

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

http://www.karenware.com/powertools/ptcookie.html

- -----Original Message-----
From: Peter Holland [mailto:Peteravailablemortgage.com]
Sent: Tuesday, October 02, 2001 7:23 AM
To: 'focus-mssecurityfocus.com'
Subject: C is for Cookie...

Does anyone know of a piece of software that can be used for viewing
and
manipulating the data inside of a cookie?

Peter Holland
Available Mortgage Funding
Dallas, Texas

-----BEGIN PGP SIGNATURE-----
Version: PGPfreeware 7.0.3 for non-commercial use <http://www.pgp.com>

iQA/AwUBO7oRB95aUxficepaEQKUegCdHh/j2FpDuG26Y2cKt/kzxWn032EAoONu
DFVc9Mrw5DAbajaHSA+aLwtE
=295H
-----END PGP SIGNATURE-----

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]