[OWASP-Malaysia] Cookie Jacking

Fri Jun 3 00:26:26 EDT 2011

Salam and Hi to all

I haven't seen anyone mentioning this topic so maybe some of you know about
it or haven't heard about it yet!!..

its called Cookie Jacking.. check out the website

https://sites.google.com/site/tentacoloviola/cookiejacking

some might argue that it need social engineering aspects but hey most of the
biggest threats or news we have heard of incidents involved the human
element.. except the recent attacks on Sony, RSA, US contracts (Lockheed
Martin, L3).. which somehow also the human element for not updating their
system.. ahem ahem
-------------- next part --------------
An HTML attachment was scrubbed...
URL: https://lists.owasp.org/pipermail/owasp-malaysia/attachments/20110603/c44a0e36/attachment.html 