[Mai_saasaa]

https://www.google.com/url?sa=t&source=w...ygCu088Ebz

This article is about facebook session cookie, the second half of the article is about assuming xs cookie of c_user but no tools are mentioned for such mission
Any ideas about how we can do that effectively?

[linkinpork]

https://www.google.com/url?sa=t&source=w...ygCu088Ebz

This article is about facebook session cookie, the second half of the article is about assuming xs cookie of c_user but no tools are mentioned for such mission
Any ideas about how we can do that effectively?

The article just proves that you can't do an MITM cos Secure flag is present, you can't use XSS because it's got HTTPOnly, and you can't bruteforce it because it's going to take a long time and the session token changes over time because of a timestamp.

That's why there are no tools.

[komple3ikos]

https://www.google.com/url?sa=t&source=w...ygCu088Ebz

This article is about facebook session cookie, the second half of the article is about assuming xs cookie of c_user but no tools are mentioned for such mission
Any ideas about how we can do that effectively?

What is your means of access? Do you have physical access? Do you have an admin account on that PC?