Quantcast
Channel: Security
Viewing all articles
Browse latest Browse all 4737

Overwriting cookie

$
0
0

Dear .net Experts,

I wrote a little script to overwrite one of my cookies and I noticed whatever I type as the domain it really doesnt matter, the domain is always shown in the cookie was my host + domain and not as the test domain I entered.

Why is that? I was hoping I can play around with domain values.

Many thanks for any hints.

<%@ Page Language="C#" Debug="true" %><!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"><script runat="server">
    void Page_Load()
    {
        HttpCookie aCookie;
        string cookieName;

        //To variables to configure
        string cpath = "/";   //cogons cookie domain path

        //SSO Cookie
        //outdate the other cookies
        //outdate cookie SMSESSION
        colCookies.Add(Request.Cookies["SMSESSION"]);

        aCookie = new HttpCookie("SMSESSION");
        aCookie.Value = "LOGGEDOFF";
        //aCookie.Expires = DateTime.Now.AddDays(-1);
        aCookie.Domain = "yyyy"; //cdomainsm;
        aCookie.Path = cpath;
        //aCookie.Secure = true;  //only if smenvironment set secure flag
        Response.Cookies.Add(aCookie);

        aCookie = new HttpCookie("SMSESSION");
        aCookie.Value = "LOGGEDOFF";
        //aCookie.Expires = DateTime.Now.AddDays(-1);
        aCookie.Domain = "testtest"; //cdomain;
        aCookie.Path = cpath;
        //aCookie.Secure = true;  //only if smenvironment set secure flag
        Response.Cookies.Add(aCookie);

        int limit = Request.Cookies.Count;
        /*for (int i=0; i<limit; i++)
        {
            cookieName = Request.Cookies[i].Name;
            colCookies.Add(Request.Cookies[i]);

        }*/

        try
        {
            grdCookies.DataSource = colCookies;
            grdCookies.DataBind();
        }
        catch (Exception ex)
        {
            Response.Write("No valid Cookies avaliable");
        }
        finally
        {
            Response.Write("cookies outdated successfully");
        }

        Response.Redirect(url);
    }

</script><html xmlns="http://www.w3.org/1999/xhtml"><head id="Head1" runat="server"><title>Outdate cookies</title></head><body><form id="form1" runat="server"><div><asp:GridView
                ID="grdCookies"
                runat="server" /></div></form></body></html>

Viewing all articles
Browse latest Browse all 4737

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>