Cookie Chaos: How to bypass __Host and __Secure cookie prefixes
CYBERSECURITY FEATURED ANALYSIS

Cookie Chaos: How to bypass __Host and __Secure cookie prefixes

SOURCE

PortSwigger Research

DATE

READ

1 min read

Browsers added cookie prefixes to protect your sessions and stop attackers from setting harmful cookies. In this post, you’ll see how to bypass cookie defenses using discrepancies in browser and serve

Browsers added cookie prefixes to protect your sessions and stop attackers from setting harmful cookies. In this post, you’ll see how to bypass cookie defenses using discrepancies in browser and serve