Web Penetration Testing with Kali Linux 2013 by Joseph Muniz

Author:Joseph Muniz
Language: eng
Format: mobi, azw3, epub
Publisher: Packt
Published: 2013-09-25T08:34:01+00:00

Chapter 5

Select View Cookie Information, and you will see stored cookies. You can click on Edit Cookie to bring up the cookie editor and replace the current cookie with a victim's stolen cookie.

Greasemonkey – Firefox plugin

[ 181 ]

Attacking Authentication

Greasemonkey is a Firefox plugin that allows users to install scripts that make on the fly changes to web page content before or after the page is loaded. Greasemonkey can be used for customizing a web page appearance, web functions, debugging, combining data from other pages, as well as other purposes. Greasemonkey is required to make other tools, such as Cookie Injector, function properly.

Cookie Injector – Firefox plugin

Cookie Injector is a user script that simplifies the process of manipulating browser cookies. There are a lot of manual steps to import a cookie from a tool like Wireshark into a web browser. Cookie Injector allows the user to copy paste a cookie portion of a dump, and have the cookies from the dump automatically created on the currently viewed web page.

You must have Greasemonkey installed to use the Cookie Injector script.

To install Cookie Injector, search Google for Cookie Injector to bring up a download link for the script. When you select to download Cookie Injector, Greasemonkey will pop up, prompting your approval for the install.

After installing the Cookie Injector script, press Alt+ C to display the cookie dialog.

Paste a copied Wireshark string into the input box and click on OK to inject cookies into the current page. See the Wireshark section on how to copy cookies for Cookie Injector using Copy, Bytes, and select Printable Text Only in Wireshark. The next two screenshots show pressing Alt+ C, pasting a Wireshark Cookie Dump, and clicking OK to see the pop-up that the captured cookies have been written into the Internet browser.

[ 182 ]

Download

Copyright Disclaimer:
This site does not store any files on its server. We only index and link to content provided by other sites. Please contact the content providers to delete copyright contents if any and email us, we'll remove relevant links or contents immediately.