0

SCENARIO:

When a user browses to the login page the web application sets SESSIONID=X; Httponly; before the authentication.

After the authentication NO new cookies are set. The only cookie used to identify the session is SESSIONID=X.

This should mean that the webapp is vulnerable to the session fixation attack. I want to develop a complete attack so I need a way to programmatically modify the value of SESSIONID.

The server doesn't use security headers (X-XSS-Protection, etc.), so the login page can be inserted into an iframe and XSS are not blocked.

Is there a way to change the value of SESSIONID when the victim access the login page through attacker web server?

0

Is there a way to change the value of SESSIONID when the victim access the login page through attacker web server?

Nope. When the victim visits attacker's web server and loads the iframe, victim's browser directly establishes new connection (such as HTTP request) to the website inside the iframe, not by going through attacker's website first then the real website.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.