cookiemonster

CookieMonster helps you detect and abuse vulnerable implementations of stateless sessions.

Name:cookiemonster

Category:Vulnerabilities

Publisher:trickest-mhmdiaa

Created:11/30/2023

Container:quay.io/trickest/cookiemonster:7e8826e

Output Type:

License:Unknown

Source:View Source

Parameters

url · string · required

-urlAn HTTP URL to retrieve cookies from instead of providing a cookie

cookie · string · required

-cookieThe cookie to attempt to decode and unsign

resign · string

-resignUnencoded data to resign the cookie with; presently only supported by Django

verbose · boolean

-verboseEnables additional output on how the cookie is decoded.

wordlist · file

-wordlistThe path to load a base64-encoded wordlist from; the default is the builtin list.

concurrency · string

-concurrencyHow many attempts should run concurrently; the default is 100