Skip to content

Exporting cookies for use #3

Description

@technion

Please forgive me if I'm "holding it wrong" but I'm attempting to test out this application.

After what appears to be a successful campaign, I have a session with a large amount of captured data. Due to the use of a password manager the Live Keylogger never captured anything, and I guess the service I looked at doesn't use "Form" submission as there was no captured form data. I'm guessing the "easy mode" here would be exporting from there if it was.

The Captured Cookies however appear to hold a logon cookie however.

On the GUI, the "RAW/VALUE" is truncated to view. You can mouseover and the full cookies shows up, but I cannot find a way to select it for copy + paste use.

I've done a Firefox profile export and dumped the cookies.sqlite file, it contains two cookies neither of which are the one on the campaign GUI. I found the campaign "Export" command but the json it dumps doesn't appear to contain the cookie.

I ended up "completing" this assessment by hitting "Inspect" and copy pasting from the HTML table, which feels like it has to be the wrong way to extract a list of cookies.

Edit: I have watched the "Session persistence" demo but I'm guessing what happened here is that it requires the assessor be working "live" where I came back and the used had finished their session, explaining the lack of a valid cookie.

Activity

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions