I am testing an web application and I found a cookie in which the language of the application is set. Specifically, I have modified one request and I have noticed that all the other requests it makes keep the value that I set in the belly. I wanted to know if it is possible to exploit this behavior in some way.

  • 1
    So you're saying you set lang=foo and the server responds with lang=foo?
    – user163495
    Mar 30, 2020 at 12:49
  • Exactly. More precisely Cookie: cookieName=original_value; and I modify it Cookie: cookieName=modify_value This value modified is always modified in subsequent requests.
    – moskino11
    Mar 30, 2020 at 13:01
  • I guess there's no way to know, you need to try. For example putting special chars the language string (special in HTML or SQL), then browsing the site to check if anything breaks.
    – reed
    Mar 30, 2020 at 13:20
  • The only attack vector i know crlf injection in such a scenario
    – yeah_well
    Mar 30, 2020 at 19:07


Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.