I know of one website that has a vulnerability where if I use a cookie editor, inject 3 of the cookies using EditThisCookie chrome extension, I am now authenticated and logged in as the target. I only learned of this vulnerability from somebody who told me about it, I didn't figure it out for myself.
I have a way to access somebody's cookies from any given website/service. Could I theoretically use the same trick to falsely authenticate myself in the same way, across any website? How would I go about figuring out which websites this works on and if so, which cookies to inject?
I have a way to access somebody's cookies from any given website/service. Could I theoretically use the same trick to falsely authenticate myself in the same way, across any website? How would I go about figuring out which websites this works on and if so, which cookies to inject?