From: Andrew Simmons (asimmons@messagelabs.com)
Date: Wed Mar 15 2006 - 05:50:36 EST
Hi, offset,
offset wrote:
> Since I've posted, I've found a nice firefox plugin called LiveHTTPHeaders that will dump
> all http header information and then I can save everything to a file. I was then going
> to write a script to parse the cookie information out for my purposes.
>
> I'd be interested in any other ideas about saving cookie state without individual copy/paste
> as some sites have a lot of cookies.
>
> -off
If you can code at all, you might find it useful to pop open the
LiveHTTPHeaders .XPI archive (it's in zip format) and take a look at the
Javascript source. I just had a quick squint at it myself, and it looks
feasible to add a quick and dirty hack to get it to dump just cookie
information. And if you're feeling massively benevolent, you could even
add some UI to enable the rest of us to turn that feature on and off... :)
cheers
\a
-- Andrew Simmons // MessageLabs Security Team Technical Security Consultant MessageLabs: Be certain ______________________________________________________________________ This email has been scanned by the MessageLabs Email Security System. For more information please visit http://www.messagelabs.com/email ______________________________________________________________________ ------------------------------------------------------------------------------ This List Sponsored by: Cenzic Concerned about Web Application Security? As attacks through web applications continue to rise, you need to proactively protect your applications from hackers. Cenzic has the most comprehensive solutions to meet your application security penetration testing and vulnerability management needs. You have an option to go with a managed service (Cenzic ClickToSecure) or an enterprise software (Cenzic Hailstorm). Download FREE whitepaper on how a managed service can help you: http://www.cenzic.com/news_events/wpappsec.php And, now for a limited time we can do a FREE audit for you to confirm your results from other product. Contact us at request@cenzic.com ------------------------------------------------------------------------------
This archive was generated by hypermail 2.1.7 : Sat Apr 12 2008 - 10:55:41 EDT