#httpOnly - Twitter Hashtag

11 months ago

Session Hijacking(Oturumunuz Nasıl Çalınabilir?) #SessionHijacking #CyberSecurity #HttpOnly #SecureCookie #TwoFactorAuth #MFA #PublicWiFi #XSS #EthicalHacking

0

14

0

211

Manuel Martínez Casasola

@HackersCuriosos

about 1 year ago

🔒🔥 HttpOnly, XSS y Secuestro de Sesiones ¿Tu cookie está desprotegida? 🔒 https://t.co/euv47rkcHD #WebSecurity #XSS #HttpOnly #AppSec #Ciberseguridad #OWASP #DevSecOps #Infosec #SessionManagement #CSP #SameSite #SecureFlag #BugBounty #BlueTeam #RedTeam #ThreatModeling

0

4

2

0

148

いつかは死ぬ。 @ituka_ha_shinu

over 1 year ago

yatta-!😹 認証クッキーに HttpOnly 属性が付与されない問題。主にAPIルートでのレスポンス処理に適した方法でSupabaseクライアントを構成し、クッキーを設定していなかったからだったね．． XSS対策に。 #Nextjs #Supabase #HttpOnly

ituka_ha_shinu's tweet photo. yatta-!😹

認証クッキーに HttpOnly 属性が付与されない問題。
主にAPIルートでのレスポンス処理に適した方法でSupabaseクライアントを構成し、クッキーを設定していなかったからだったね．．

XSS対策に。 #Nextjs #Supabase #HttpOnly https://t.co/uMlcXnKnGG

0

2

0

306

EVE2@ゼロからは��めるシステム開発 @GreenMars2023

over 1 year ago

https://t.co/ffl3wVJxjX ブログを更新しました。＞環境によりセキュリティを実現する #EVEシステム #プログラミング #セキュリティ #Ubuntu #apache #php #SSL #TLS #HTTPS #クッキー #セッション #クッキー #HttpOnly #JavaScript #HSTS対策 #秘密鍵 #サーバー証明書 #中間証明書 #PKI

GreenMars2023's tweet photo. https://t.co/ffl3wVJxjX
ブログを更新しました。＞環境によりセキュリティを実現する
#EVEシステム #プログラミング #セキュリティ #Ubuntu #apache #php #SSL #TLS #HTTPS #クッキー #セッション #クッキー #HttpOnly #JavaScript #HSTS対策 #秘密鍵 #サーバー証明書 #中間証明書 #PKI https://t.co/IE3jaqSz36

0

1

0

372

Smart Snippet @Smart_Snippet

almost 2 years ago

🛡️ Secure cookies with the HttpOnly flag. How-To: Use the HttpOnly flag on cookies to prevent access by JavaScript, enhancing security. #CookieSecurity #HttpOnly #SmartSnippet #AllDayDSK

0

5

1

0

27

ASP.NET Zero

@aspnetzero

almost 3 years ago

Check how to enable #HttpOnly cookies in #ASPNETZero angular👉: https://t.co/dNSkjadBlE #aspnetzero #angular #aspnetcore #dotnet

0

7

3

0

573

Abdalla Abdelrhman @0x2nac0nda

about 4 years ago

Another way to access #HTTPOnly cookies is by exploiting web server #bugs, one such example is related to the infamous #Apache HTTP Server 2.2.x through 2.2.21 (#CVE-2012-0053) #Tips #Apache

0

7

0

1

0

TechieWorkk @chiragdoctor

about 4 years ago

One of the main benefits of using #Nextjs is setting a #httpOnly cookie. This is not possible by just using #react. #webdevelopment #100daysofcoding #100DaysOfHacking

0

3

1

0

Today Cyber News @TodayCyberNews

almost 5 years ago

Bypassing HttpOnly 1. Why phpinfo 2. Stealing ci_session with info.php file 3. POC :- https://t.co/dNVl7crfp2 Research: https://t.co/Cl1yBJSCjy #web #httponly #phpinfo #xss #bugbounty #bugbountytips #Cybersecurite

0

68

32

11

0

Christopher Stanley

@cstanley

over 5 years ago

I like the idea of short lived #JWT (access token) and a long lived opaque token (refresh token). A major problem I see is authentication can be complicated and easily incorrectly implemented. https://t.co/voaEEO4UrY #headers #HttpOnly #SameOrigin #CSRF #XSS #CookieFixation

1

2

1

2

0

amg @armaganvideos

over 5 years ago

Whew, going from localStorage JWT auth to HTTPonly cookies was a breeze with Axios and Rails. Thanks to @sm_debenedetto for the blog post from 2018 and @sto3psl for reminding me in a recent twitter post. #rubyonrails #httponly #react #localStorage

0

1

0

Acunetix by Invicti @acunetix

about 6 years ago

The HttpOnly flag is a method of protecting cookies from theft. It tells the web browser that the cookie can only be accessed through HTTP, not through JavaScript. Learn how this flag works and how to use it in practice. #Cybersecurity #HttpOnly #XSS https://t.co/srIxbJ9251

0

3

0

Rad K. @redvanisation

over 6 years ago

D189-190: Set up the authentication system of my ecommerce in the server side with #JWT and an #HTTPOnly cookie, set up the front-end as well and if everything goes well I will be done with the whole project tomorrow! #100DaysOfCode #reactjs #rubyonrails @microverseinc

0

11

6

0

Hussein Nasser

@hnasr

about 7 years ago

#httponly cookies 🍪 https://t.co/nWF4RynTYc

0

2

0

🅳🅴🅵🆂🅴🅲🅽🆂🅰🆃🆃🅰🅲🅺 @defsecnsattack

over 7 years ago

Cookie Security - Myths and Misconceptions https://t.co/phwSCbaDR8 #Owasp #Cookie #security #host- #Path #Secure #HttpOnly #SameSite=Strict

defsecnsattack's tweet photo. Cookie Security - Myths and Misconceptions
https://t.co/phwSCbaDR8
#Owasp #Cookie #security #host- #Path #Secure #HttpOnly #SameSite=Strict https://t.co/qGVqBomVkp

0

5

2

0

@[email protected] - Hetti ʷᵃʳᶦ @Th3PeKo

over 8 years ago

FYI @UPC_Austria verschickt Trackinglinks in ihren Informations-Emails die HTTP only sind und über die Google Cloud gehen. Diese Kombination hätte ich nicht von einem ISP erwartet... #tracking #HTTPonly #email #wtf

1

0

1

0

Abhay Bhargav

@abhaybhargav

over 8 years ago

@manicode @0x6D6172696F @LocoMocoSec Not to mention, A lot of apps I am seeing these days use auth-tokens, etc in localStorage/etc #HttpOnly ain't helping you there. Not by a long shot

1

3

1

0