Web App Pentesting - HTTP Cookies & Sessions

Welcome to the all-new, revamped Web App Pentesting course, in this video, I explain what HTTP cookies and session IDs are used for, and how they can be exploited by attackers.
//LINKS
DVWA Docker Image: hub.docker.com/r/vulnerables/...
DVWA GitHub Repo: github.com/digininja/DVWA
Get started with Intigriti: go.intigriti.com/hackersploit
//PLATFORMS
BLOG ►► bit.ly/3qjvSjK
FORUM ►► bit.ly/39r2kcY
ACADEMY ►► bit.ly/39CuORr
//SOCIAL NETWORKS
TWITTER ►► bit.ly/3sNKXfq
DISCORD ►► bit.ly/3hkIDsK
INSTAGRAM ►► bit.ly/3sP1Syh
LINKEDIN ►► bit.ly/360qwlN
PATREON ►► bit.ly/365iDLK
MERCHANDISE ►► bit.ly/3c2jDEn
//BOOKS
Privilege Escalation Techniques ►► amzn.to/3ylCl33
Docker Security Essentials (FREE) ►► bit.ly/3pDcFuA
//SUPPORT THE CHANNEL
NordVPN Affiliate Link (73% Off) ►► bit.ly/3DEPbu5
Get $100 In Free Linode Credit ►► bit.ly/3yagvix
//CYBERTALK PODCAST
Spotify ►► spoti.fi/3lP65jv
Apple Podcasts ►► apple.co/3GsIPQo
//WE VALUE YOUR FEEDBACK
We hope you enjoyed the video and found value in the content. We value your feedback, If you have any questions or suggestions feel free to post them in the comments section or contact us directly via our social platforms.
//THANK YOU!
Thanks for watching!
Благодарю за просмотр!
Kiitos katsomisesta
Danke fürs Zuschauen!
感谢您观看
Merci d'avoir regardé
Obrigado por assistir
دیکھنے کے لیے شکریہ
देखने के लिए धन्यवाद
Grazie per la visione
Gracias por ver
شكرا للمشاهدة
-----------------------------------------------------------------------------------
#Pentesting#Cybersecurity

[@roccoranallo4027]

Dude your videos are so fire, I got a bachelors in cyber and I have learned soooooo much from your videos because of the way you explain the concepts, bought your book too looking forward to reading it, Thank you!

[@0x1sac]

@Michael Van Winkle I KNOW ALL THE BEST SHORTCUTS, YOU JUST HAVE TO-

[@ICOFRITE]

Alexis you are genuinely a marvel. Thank you so much for all you do

[@skynet.yousha]

High quality explanation, Alexis!! Well keep it up. Learned lots from you.

[@jpierce2l33t]

Dude, another great one! I've been wanting to get into more web stuff, and bug bounties etc..and this stuff is invaluable! I know Burp some, but only have the community edition...just downloaded ZAP and have started to learn it a bit. I just noticed you had some videos using that as well!

[@vladyslavv3154]

Huge appreciation for this video, keep it up, man!

[@homeofcreation]

Excellent demo with explanations. Thank you very much.

[@rudrasalaria3431]

Always waiting for your video. Thank you Sir. Lots of Love from India 🇮🇳 ♥️

[@DG-if3gs]

i always like your sharing without looking at it. i know that they are valuable.

[@arenaesports2580]

Great knowledge comes from a great heart. 👍🏻

[@Sc00by383]

Thanks Alexis giving me great knowledge of this.

[@gonzalogermano2312]

awesome video and very easy to understand , keep up the excellent knowledge level!!! thanks

[@rishabhrana3773]

Your videos never disappoint

[@emanuelepicariello]

Great and useful video, thanks!

[@justkiddieng6317]

More web and network penetration videos bro. That would be great.

[@RafaelLima-ox9ul]

Awesome! Thanks for sharing!

[@ghostesprit4403]

Education is the key!

[@CloudSecWithRay]

Great content as always

[@localhost4356]

Amazing & Excellent

[@MrHT1993]

Thank you so much for this great content. Can you please number and compile your latest web app pentesting videos into a playlist? They will be much easier to follow that way. Thank you very much.

[@pakcyberteam]

شکریہ

[@venomx2131]

Superb bro

[@geniusesml3700]

Thank you senpai

[@cannonkain375]

this was really useful.

[@AgentProtonDecay]

Thank you for sharing

[@hackeranonymous9565]

Love you 💞😘 bro 🤗

[@hacking9077]

Great. Can you please do a video about pentesting report writing?

[@vinay5265]

Pls make a videos on powershell and bash script

[@itsme7570]

Cool extension

[@TheConstantLearnerGuy]

Is there any well structured and complete Web App Pentesting course of yours ? Paid will do the work too.

[@mn.raunaq]

thank you!

[@modmah7191]

Thanks!

[@unknownanonymous4735]

hi thanksss please make such same tutorial for SOP

[@phinehasantwi9615]

Thanks alot

[@VishalRadan]

is it comes under xss bug??
when we perform in live site and get cookies of the session

[@saumoncooking414]

yes !

[@pakcyberteam]

Which screen recorder do you use..

[@parisbrian564]

Cool.....
Alexis

[@oleglivcha5041]

Actually the browser itself is concerned with cookie expiration date,if it has expired by the time request is made ,browser will delete it silently and make a request without adding cookie to it.I’m not sure there is a practice by which server will validate the cookie for its expiration date,correct me if I wrong.Thanks

[@alwan7777]

please also discuss how we know whether a hash is md5 or base64 62 and others😁

[@itsme7570]

It usually says it. Or you'll know after you crack it with for example crackstation

[@DHIRAL2908]

hash-identifier is pretty useful too!

[@alwan7777]

@Voldemort thks bro😁🙏

[@sunnyyt4082]

sir at 12:20 before the server had sent a response , when we sent a get request a cookie had generated , so who generated cookie browser or server?

[@pawankunwar9715]

its already generated by the server when you visit that website(in this case but the cookie are same because it is vulnerable website)and when we login through the website, it is also again generate with session cookie.

[@konfushon]

Didn't know this dude is from Nairobi Kenya

[@suporte99py99]

Anyone use the BURP SUITE HERE? LEAVE DISCORD.

[@ryanlee5435]

1빠

[@mahamaatir7755]

Bitcoin should be next topic

[@Jesse_Johnson]

Dude he stop making content?!

[@hackeranonymous9565]

Hacker

[@mahamaatir7755]

Hacking bitcoin videoo

[@Nkworldff]

Any one tell how to get access from old cookies in facebook anyone can help i can pay for it any one can help🥹