Skip to content

Webeasy

Cookie Jar

100 points · 0 solved

A login response from a staging app. Session state in the cookie, nothing to worry about… right?

HTTP/1.1 302 Found
Location: /dashboard
Set-Cookie: session=eyJ1c2VyIjoiZ3Vlc3QiLCJyb2xlIjoibWVtYmVyIiwibm90ZSI6InNze2Nvb2tpZXNfYXJlX25vdF9zZWNyZXRzfSJ9; Path=/; HttpOnly; SameSite=Lax

Hints0/2

Learn the technique/learn/web-app-security