I'm just learning right now about different analysis tools and I came across something in a nikto scan last night on a VM server I own. It said something along the lines of:
Cookie ASPSESSIONIDSACSARTD created without httponly flag.
At first I dismissed it because it's a vulnerable server so there's like a million other things to look at also. But the more I think about it though the more it bugs me.
What could be done with custom cookies? I have tried googling this but it's possibly the most ambiguous search terms ever. My guess is that you could inject commands into cookies.
Any metasploit modules that I could look at or sites for reference would be greatly appreciated.