how to read cookie's content

JavaScript and client side scripting.

Moderator: General Moderators

Post Reply
tintin
Forum Newbie
Posts: 13
Joined: Fri Dec 13, 2002 7:13 am

how to read cookie's content

Post by tintin »

Hi,

How can I read the value of a cookie, when it is not created by a site I owns ?

Thanks for help
d3ad1ysp0rk
Forum Donator
Posts: 1661
Joined: Mon Oct 20, 2003 8:31 pm
Location: Maine, USA

Post by d3ad1ysp0rk »

i don't think you can/should be able to

it's a security risk, if someone has a cookie with their username and pass, and u can access that, then who knows what people will do..

so i dont believe you can

what do you want it for anyway?
tintin
Forum Newbie
Posts: 13
Joined: Fri Dec 13, 2002 7:13 am

Post by tintin »

Hi,

Yes, I agree that there is a security risk to put passwords in cookies... I hope that serious sites won't write password without encryption, and anyway I do not store important passwords on my machine, and everybody should know that.

I just would like if it was possible to check cookies values stored as files on my W2K computer, under my account, without beeing owner of the site which create them.

It is a security risk too, if someone can write on our computer and we can't know what...

Thanks for your time.
User avatar
twigletmac
Her Royal Site Adminness
Posts: 5371
Joined: Tue Apr 23, 2002 2:21 am
Location: Essex, UK

Post by twigletmac »

Which browser are you using? In Mozilla Firebird there's a handy cookie manager to view all the cookies and the information within them. Other than that, check out what's stored in your Temporary Internet Files directory.

However, you're likely to find most information is either hashed, encrypted or otherwise not very indicative of what information is being stored.

Mac
m3rajk
DevNet Resident
Posts: 1191
Joined: Mon Jun 02, 2003 3:37 pm

Post by m3rajk »

not just that, i do beleive that cookies can be set to a specific domain so you can't be read by other domains
User avatar
twigletmac
Her Royal Site Adminness
Posts: 5371
Joined: Tue Apr 23, 2002 2:21 am
Location: Essex, UK

Post by twigletmac »

But you do have access to the cookies set on your computer.

Mac
m3rajk
DevNet Resident
Posts: 1191
Joined: Mon Jun 02, 2003 3:37 pm

Post by m3rajk »

yet from the sound of the original post he was asking how to do so remotely.

you can only do your own user on your computer and it's not a security risk for you to see your cookies (netscape has a file cookies.txt that's a tab seperated spreadsheet that you can look at with notepad)

i took the original post to be OTHER people when viewing HIS site.

a good browser should not allow that
Post Reply