Modules: Add apache_tomcat_examples_cookie_disclosure module #2205
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
wheatley
approved these changes
Nov 9, 2021
Contributor
wheatley
left a comment
wheatley
left a comment
There was a problem hiding this comment.
Walked through using this module, everything seems to be working and retrieving the session id without any obvious issues.
DeezyE
approved these changes
Nov 9, 2021
Contributor
DeezyE
left a comment
DeezyE
left a comment
There was a problem hiding this comment.
I can confirm this runs well :) I'll share blog draft with you
wheatley
suggested changes
Nov 9, 2021
modules/browser/hooked_domain/apache_tomcat_examples_cookie_disclosure/config.yaml
Outdated
Show resolved
Hide resolved
bcoles
force-pushed
the
apache_tomcat_examples_cookie_disclosure
branch
from
9863378 to
c8595b0
Compare
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
3 participants
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Category
Apache Tomcat RequestHeaderExample Cookie Disclosure module.
Feature Description
I still encounter Apache Tomcat with the
examplesapp deployed from time to time. The examples include aRequestHeaderExampleservlet which returns request headers in the HTTP response body, including all cookies. This offers a trivial method to bypassHttpOnlyprotection on cookies. This is an old and well known technique that has existed for at least 5 years (likely much longer).Test Cases
examplesapplication is installed and deployed./examples/jsp/(such as/examples/jsp/jsp2/simpletag/hello.jsp) will generate cookies (withHttpOnly).Apache Tomcat RequestHeaderExample Cookie Disclosuremodule from theBrowser->Hooked Domaincategory.