Stealing HttpOnly cookies with the cookie sandwich technique

2025-01-22来源 PortSwigger ResearchEnglish
In this post, I will introduce the "cookie sandwich" technique which lets you bypass the HttpOnly flag on certain servers. This research follows on from Bypassing WAFs with the phantom $Version cookie

原文：https://www.a8q9.cn/en/article/stealing-httponly-cookies-with-the-cookie-sandwich-technique-1674a9.html

相关文章