|
Posted by Janwillem Borleffs on 05/28/06 01:06
julianmlp@gmail.com wrote:
> What I was wondering is: Is there any (simple/easy) way to hijack a
> cookie remotely? (to be afraid of)
>
When you have the session ID, all you need to do is to pass it as a cookie
header (not from a URL) to fake the call.
With wget, I think it's done with something like:
wget --header="Cookie: SessionID=sessionid" URL
JW
Navigation:
[Reply to this message]
|