Hack Forums
How do you take advantage of an apache httponly cookie disclosure - Printable Version

+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Website Hacking (https://hackforums.net/forumdisplay.php?fid=43)
+---- Thread: How do you take advantage of an apache httponly cookie disclosure (/showthread.php?tid=3470583)



How do you take advantage of an apache httponly cookie disclosure - johndicamillo - May 10, 2013

I was using a web vulnerability scanner and it found a "apache httponly cookie disclosure" on my site. I would like to know how I would go about taking advantage of it before I patch it. Any information would be nice. Thank you. 🤝


* - Feminist - May 10, 2013

(May 10, 2013 05:09 PM)johndicamillo Wrote:  I was using a web vulnerability scanner and it found a "apache httponly cookie disclosure" on my site. I would like to know how I would go about taking advantage of it before I patch it. Any information would be nice. Thank you. 🤝

Upgrade apache. What web scanner are you using?


* - hansp - May 11, 2013

(May 10, 2013 09:08 PM)SKPrograms Wrote:  Upgrade apache. What web scanner are you using?

Acuneskids(Acunetix), the Scanner for the pr0 l33t Skids


* - vehla - May 11, 2013

(May 11, 2013 12:17 AM)hansp Wrote:  Acuneskids(Acunetix), the Scanner for the pr0 l33t Skids

He is using for his own website. Any problem?


* - Cathal - May 11, 2013

(May 11, 2013 12:22 AM)vehla Wrote:  He is using for his own website. Any problem?

I thought your account got closed....?


* - vehla - May 11, 2013

(May 11, 2013 01:29 AM)MrCathal09 Wrote:  I thought your account got closed....?

So, next time just don't believe what you think.