Tag: advisory

Weaponizing Monster for Cookies Attacks

VSRC, 3 months ago

Summary To find the weak secret key in web applications, I used cookiemonster during pentests and scout. When a key is leaked, it can make…