LinuxQuestions.org

LinuxQuestions.org (/questions/)
-   Linux - Security (https://www.linuxquestions.org/questions/linux-security-4/)
-   -   how to use cookies from tcp header to bypass login page (https://www.linuxquestions.org/questions/linux-security-4/how-to-use-cookies-from-tcp-header-to-bypass-login-page-520804/)

kamariz 01-19-2007 03:08 AM

how to use cookies from tcp header to bypass login page
 
hi all..

when doing a network monitoring in my own lab using tcpflow, i got this tcp header info.

Quote:

POST /sendmessage.php HTTP/1.1
Host: www.friendster.com
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.1.1) Gecko/20061204 Firefox/2.0.0.1
Accept: text/xml,application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 300
Connection: keep-alive
Referer: http://www.friendster.com/bulletin.php?statpos=bulletintable&bid=109308367&uid=215772
Cookie: friendster_HBX=lucky=nope; friendster_cacheList=/=1169193129765; friendster_auth=uid%3D2188153%26lastclick%3D1169193544%26cty%3Dmy%26icty%3Dmy%26mac%3DMjg3N2VhMjhhN2 Y3OWY0OWM1ZTQ0NDZjMzNjZWFmZmU%2A; friendster_tzoffset=28800; friendster_6apart_auth=uid%3D2188153%26lastclick%3D1169193544%26timeout%3D1169279944%26cty%3Dmy%26ma c%3DZDhlYzhiNzY0ZmFmNjczMzExMmJiNzY1MjM4MWIxNTE%2A; friendster_pusit_auth=uid%3D2188153%26lastclick%3D1169193544%26timeout%3D1169279944%26cty%3Dmy%26mac %3DMzYyMTZkODU2ZjAyOWI2NTg2NjNiODg2YmUyZjIyZTc%2A; friendster_update=/user.php
Content-Type: application/x-www-form-urlencoded
Content-Length: 7183
i m using 2 pc to do this experiment. 1 pc running tcpflow to dump all the packet and use another pc to login to my frendster. what i want to do is, using the cookies info from the tcp header to bypass friendster's login page.

anyone have suggestion,tools,tutorial on how to accomplish my goal?

thanks ..

chort 01-19-2007 08:04 PM

a) That's not a TCP cookie, it's a HTTP cookie. TCP cookies are used to defend against synfloods, they aren't used for authentication.
b) It seems likely that you would be trying to automatically login to Friendster with scripts (and then perform some automated functions), which I'm fairly certain is forbidden by the Friendster ToS.


All times are GMT -5. The time now is 12:58 AM.