Posted by Janwillem Borleffs on 05/28/06 01:06

julianmlp@gmail.com wrote:
> What I was wondering is: Is there any (simple/easy) way to hijack a
> cookie remotely? (to be afraid of)
>

When you have the session ID, all you need to do is to pass it as a cookie
header (not from a URL) to fake the call.

With wget, I think it's done with something like:

wget --header="Cookie: SessionID=sessionid" URL


JW

[Back to original message]