[CookieCatcher] Session Hijacking Tool
CookieCatcher is an open source application which was created to
assist in the exploitation of XSS (Cross Site Scripting) vulnerabilities
within web applications to steal user session IDs (aka Session
Hijacking). The use of this application is purely educational and should
not be used without proper permission from the target application.
Features:
- Prebuilt payloads to steal cookie data
- Just copy and paste payload into a XSS vulnerability
- Will send email notification when new cookies are stolen
- Will attempt to refresh cookies every 3 minutes to avoid inactivity timeouts
- Provides full HTTP requests to hijack sessions through a proxy (BuRP, etc)
- Will attempt to load a preview when viewing the cookie data
- PAYLOADS
- Basic AJAX Attack
- HTTPONLY evasion for Apache CVE-20120053
- More to come
Video Demo: http://www.youtube.com/watch?v=2GH6RRozOpY
[CookieCatcher] Session Hijacking Tool
![[CookieCatcher] Session Hijacking Tool](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEigS62t4wqUZ2v6v-z9LlyzxpXWCP-x-5NiQFepKm9SyT4PtWQ7zy_JpjhGEWihUfcHgjzA2Pg3wU7CSnWD4wHYCbsOMQqMmEfmeHBW8ivS2KcWuVoLtXtw2RgSnnzrXA-O9Cbvdsr9iS4/s72-c/CookieCatcher.bmp)
Reviewed by Zion3R
on
9:15 PM
Rating:
Reviewed by Zion3R
on
9:15 PM
Rating:
