+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Website Hacking (https://hackforums.net/forumdisplay.php?fid=43)
+---- Thread: PHPSESSID ?? (/showthread.php?tid=5864231)
PHPSESSID ?? - BT_751 - Jul 20, 2018
HI,
Guys I scan the web site using vega and i get a high alert :
"Session Cookie Without Secure Flag "
I find in the case of "Resource Content":PHPSESSID=uon2cjp6uhl0dq6hrsqjo6la83; path=/
Please help me to know how can i benefit from it?
And thank you
RE: PHPSESSID ?? - Triops - Jul 20, 2018
As far as I know the only way that could be a benefit to you is if you managed to get the PHPSESSID cookie from another user, say the admin, while they are logged in. That'd allow you to access their account on the website.
RE: PHPSESSID ?? - 0xB9 - Jul 20, 2018
I answered your question in your first post here... What else is it you're trying to understand?