M
Matze
May be this is more a general http or InternetExplorer question, but
still I am sure one of You can answer this.
I have read in an article that stealing cookies from a client machine
is a common thread. But I cant get it to work.
On one computer I opened a page that executed
FormsAuthentication.SetAuthCookie("myname",true). I then copied the
cookie to the new machine and opened one secured page. It didnt work.
I know I can export cookies in InternetExplorer and Import them on the
other machine, but this doesnt look like the "real" thread to me.
Can you tell mew how cookie stealing would realy happen - especially
for the authentication cookie? (Http-sniffing and cross site attacks
are not the toppic for here)
still I am sure one of You can answer this.
I have read in an article that stealing cookies from a client machine
is a common thread. But I cant get it to work.
On one computer I opened a page that executed
FormsAuthentication.SetAuthCookie("myname",true). I then copied the
cookie to the new machine and opened one secured page. It didnt work.
I know I can export cookies in InternetExplorer and Import them on the
other machine, but this doesnt look like the "real" thread to me.
Can you tell mew how cookie stealing would realy happen - especially
for the authentication cookie? (Http-sniffing and cross site attacks
are not the toppic for here)