+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Website Hacking (https://hackforums.net/forumdisplay.php?fid=43)
+---- Thread: Cookie injection questions (/showthread.php?tid=6012470)
Cookie injection questions - themet315 - Sep 30, 2019
I know of one website that has a vulnerability where if I use a cookie editor, inject 3 of the cookies using EditThisCookie chrome extension, I am now authenticated and logged in as the target. I only learned of this vulnerability from somebody who told me about it, I didn't figure it out for myself.
I have a way to access somebody's cookies from any given website/service. Could I theoretically use the same trick to falsely authenticate myself in the same way, across any website? How would I go about figuring out which websites this works on and if so, which cookies to inject?