Curated security research, vulnerabilities, advisories and tools for practitioners.

#cookies

Security coverage tagged cookies.

1.

Cookie Chaos: How to bypass __Host and __Secure cookie prefixes

research | 2025-09-03 14:46 | portswigger.net | original ↗ | #cookies | #asp-net | #unicode

2.

The Campaign Is Not Available in Your Country: XBOW Discovered an SQLi While Attempting to Bypass Geolocation Restrictions.

research | 2025-07-31 12:00 | xbow.com | original ↗ | #bug-bounty | #cloud | #rce

3.

Bypassing WAFs with the phantom $Version cookie

research | 2025-06-30 16:01 | portswigger.net | original ↗ | #web-security | #cookies | #waf-bypass

4.

Stealing HttpOnly cookies with the cookie sandwich technique

research | 2025-06-30 16:01 | portswigger.net | original ↗ | #cookies | #exfiltration | #session-security

5.

How Serialized Cookies Led to RCE on a WordPress Website

blog | 2024-05-09 16:11 | hackerone.com | original ↗ | #bug-bounty | #rce | #nextcloud

6.

Hardening Your Laravel Applications: Tips for Secure Session and Cookie Management

blog | 2024-03-15 03:06 | hackerone.com | original ↗ | #php | #web-security | #cookies

7.

Web Storage: the lesser evil for session tokens

research | 2021-02-01 11:33 | portswigger.net | original ↗ | #web-security | #cookies | #session-tokens

8.

Automatic session handling

blog | 2018-08-03 18:04 | portswigger.net | original ↗ | #burp-suite | #crawler | #session-handling

9.

[MoBP] Passive vulnerability scanning

vulnerability | 2008-11-19 08:03 | portswigger.net | original ↗ | #burp-suite | #information-disclosure | #vulnerability-scanning