Information Security Stack Exchange is a question and answer site for information security professionals. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

So, I am trying to obtain a cookie without the secure flag enabled over HTTPS. After reading about it, I came across an answer:

  1. You visit which drops a cookie on your browser.

  2. You then visit however a MITM inserts:

    <div style='visibility:hidden'>
       <iframe src=''></iframe>
  3. MiTM sniffs your cookie from the request on the iframe

I am currently trying to duplicate the above steps.

Using a proxy tool like Burp, I am able to obtain the cookies and all header information. I am wondering, how do I insert an iframe with a HTTP website as a request?

Am I using the wrong tool?

share|improve this question
AFAIK, Burp Suite already has an HTTP editor which allows you to do that, or you can use Fiddler to modify and inject HTML. – Adi Jun 4 '13 at 16:01
This tool might be more useful for you – Vitaly Osipov Jun 5 '13 at 7:17

You can do this using the Proxy tool (tab) of Burp. Just be sure that you added the host ( in this case) to the Scope and check the "Intercept server responses..." check box on the Options tab (under Proxy).

This way all the server responses will be displayed on the Intercept tab where you can place arbitrary content in them.

You can also use the automatic Match and Replace feature under Proxy/Options.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.