Is there a list of names for cookies carrying SID's? For instance:
- PHP by default uses PHPSESSIONID
- Tomcat uses JSESSIONID
I would like to be able to intercepts all SID's supplied via Cookies, of websites I visit. I could use heuristics like:
- HttpOnly attribute set
- Secure attribute set (not always the case)
- The name contains the string "ID" or "SESSION"
Has anyone done this kind of research before?