Hello and welcome to the next video. Cookie management issues.
Now this video, what you going to learn soon? This
video, first of all, we will learn about cooking management issue
and then I'm going to show you an example. So let
me open the lab setup. My
guys. First of all, what
we're going to do here. We are going to capture request
inside Brookfield Zoo Festival. We need to log in.
Then we will catch a request inside the street, right then
will copy that request. And then
we will log out from this website.
So we will try to login inside website, using the
cookie, which we had.
So, let me show you the process step
by step. So, first of all, let's login in the website. Here. We
are trying to steal cookie
and we are hijacking session. So first
of all, you can click on sign up.
All right. So, let me type a test and
test.
Like login, here we
go. Now, let's change the proxy settings
hear Alex capture requesting Retreat. So
you can click here. You can
click on the Francis.
Insert references, we have network settings and then
you can click on settings here, select manual,
proxy configuration and then you
can click, okay.
And then you can refresh the page.
Alright, in proxy. We have the
request available. You can see how
your name is test, process, test cookies, login
equal to test test,
right? So we have the
request of libel here.
All right. So for example, if I
send this request in to
Repeater.
So if I clip send, so you
can see here that we are getting response and we
are lovely inside website, great.
So do one thing copied.
And save, it example of me saved as
here.
All right. So let me move this and peace
to your request. You right?
All right, Siri.
So we have saved this request. Now. The
next thing is we are going to log out from the website. We
are going to clear all the cache from browser and we
will go back to the login page.
So, let me go back to the
browser here and let's change the proxy settings
again.
All right. Click settings. No proxy.
Okay, then first
of all, let's log out from this website.
All right. Here we go.
And one more thing you need to clear the cache, all
those click here, click preferences to privacy
and security.
Then clear data.
You can get it.
You can also carry clear history,
so you can order clear cache. All right,
so last 2 hours.
So, we have cleared cache.
Let me defend to speed again. All right, now, I'm
what I'm going to do. I'm going to capture request.
When we are log out. And then I will
try to log in using previous request.
So we have captured a request.
Now, we have the cookie, so we will try to
hijack a session.
Are we can see that we can use the previous cookie?
To open ticket, new request.
So, I'm going to look me
again. Change the
Data settings, Milo, proxy configuration.
And let me type your admin.
Admin.
Click login.
Look me up on Burke Street. Are here we
go.
so, this is like West, we have
So first of all, let me drop this request and just request,
we have contact with, you can see that we
are log out from the website. We don't have any cookie, right?
So can we use the previous request
here?
So let's try this one.
David.
And breastfeed.
And let's based
here. Let's see if we
can login inside website automatically or
not. You can see here that we are not looking. So let
me forward
the Sea Quest.
To the browser can see.
and,
Can we go? So you can see here that we have successfully logged
in inside website. It means that we have
used the previous cookie to login.
Adult off the new request because that
particular cookie is
static. It means it is
same.
But to secure a website,
you need to change the cookies automatically after
each login, but it is not happening. In this
case, two keys static cookies, name in
all requests. That's why we are able to perform this task
so that I certainly cookie management issues
of living in the website. That's why we are able to use
previous requests. And now, you can see
here that we have successfully logged in because I have
also cleared the cache from my browser.
But still, we are able to login inside
the website. It means there's certainly a management
issue.
So this is all about cookie management issues
and website.
And the next section we are going to learn about report analysis.