Skip to content Skip to sidebar Skip to footer

Get Httponly Cookies With Javascript

do you know of any way to get access to HttpOnly cookies using javascript. I know that the point of those cookies is that you won't be able to get them this way (for security reaso

Solution 1:

From javascript only the encrypted version of the HttpOnly-cookies are available, and since the key is generated uniquely for each computer, the cookies cannot be used (unless cracked) on other computers.

Solution 2:

No, if there were a way, it would be browser-specific, and probably be patched really soon. What you're looking for is a security hole, and won't last long once it's been discovered.

Solution 3:

Its possible through applet or npapi plugin

Request the server for a connection,it will response with httpOnly cookie

Pass it to JavaScript from applet

Its a security hole that's why chrome and Firefox going to stop npapi support

Solution 4:

I found a way to access an HTML-only cookie. Get the EditTThisCookie extension, then open the page you want. Click on the extension at the top (aka cookie) look for the cookie you want, click on it, then un-check the http only button, it is now accessible by document.cookie.

Post a Comment for "Get Httponly Cookies With Javascript"