Skip to content

Cookies vulnerable

Thiago Farias edited this page Mar 26, 2023 · 4 revisions

What is XSS

Take a look at XSS first.

The problem

Now that you have the understanding of what is a XSS DOM-based attack, we are gonna discuss cookies vulnerabilities.

The fact is: our cookies are vunerable. We send it to the browser and then the application saves it at the document.cookies dom element.

It can be accessed by attackers and exploited to clone our client's card data for example.

🖱️ Hands-on

📓 Explore it

Take advantage of the product page and get access to all card-related data with a XSS attack.

🔐 Solve it

[TODO]