Stay Logged In
Last updated
Last updated
Checkbox labeled something like "Remember me" or "Keep me logged in".
Some websites generate the "remember me" cookie based on a predictable concatenation of static values, such as the username and a timestamp. Some even use the password as part of the cookie.
Bruteforce - Payload processing: hash md5, add prefix, base64 encode
Don't forget to clear the session cookie, only use the "remember me" cookie
The go-to manual for web app pentesters. Covers XSS, SQLi, logic flaws, and more
Learn how to perform reconnaissance on a target, how to identify vulnerabilities, and how to exploit them
Learn about the most common types of bugs like cross-site scripting, insecure direct object references, and server-side request forgery.
