Hands in the Cookie Jar: Dumping Cookies with Chromium’s Remote Debugger Port
specterops.io | blog
Summary
Introduction EDIT 7/16/23: Chromium added protections against this technique. Additional details can be found here: https://slyd0g.medium.com/debugging-cookie-dumping-failures-with-chromiums-remote-debugger-8a4c4d19429f This blogpost will describe the concept of cookie theft against Chromium browsers and how this technique can be utilized to access web applications without credentials. This technique is mapped to MITRE ATT&CK under Steal Web Session Cookie (T1539). On a recent […]
- Published
- Collected
--- id: 9777 title: "Hands in the Cookie Jar: Dumping Cookies with Chromium’s Remote Debugger Port" source_domain: specterops.io source_url: "https://specterops.io/blog/2020/12/17/hands-in-the-cookie-jar-dumping-cookies-with-chromiums-remote-debugger-port/" published_at: "2020-12-17T15:47:00Z" phying_url: "https://phying.com/item/9777" lang: en --- # Hands in the Cookie Jar: Dumping Cookies with Chromium’s Remote Debugger Port ## Summary Introduction EDIT 7/16/23: Chromium added protections against this technique. Additional details can be found here: https://slyd0g.medium.com/debugging-cookie-dumping-failures-with-chromiums-remote-debugger-8a4c4d19429f This blogpost will describe the concept of cookie theft against Chromium browsers and how this technique can be utilized to access web applications without credentials. This technique is mapped to MITRE ATT&CK under Steal Web Session Cookie (T1539). On a recent […] ## Intelligence Metadata - **Sources:** specterops.io - **Published:** 2020-12-17T15:47:00Z - **Original:** https://specterops.io/blog/2020/12/17/hands-in-the-cookie-jar-dumping-cookies-with-chromiums-remote-debugger-port/ - **Phying News:** https://phying.com/item/9777