Web App Pentesting - HTTP Cookies & Sessions

Welcome to the all-new, revamped Web App Pentesting course, in this video, I explain what HTTP cookies and session IDs are used for, and how they can be exploited by attackers.
//LINKS
DVWA Docker Image: hub.docker.com/r/vulnerables/...
DVWA GitHub Repo: github.com/digininja/DVWA
Get started with Intigriti: go.intigriti.com/hackersploit
//PLATFORMS
BLOG ►► bit.ly/3qjvSjK
FORUM ►► bit.ly/39r2kcY
ACADEMY ►► bit.ly/39CuORr
//SOCIAL NETWORKS
TWITTER ►► bit.ly/3sNKXfq
DISCORD ►► bit.ly/3hkIDsK
INSTAGRAM ►► bit.ly/3sP1Syh
LINKEDIN ►► bit.ly/360qwlN
PATREON ►► bit.ly/365iDLK
MERCHANDISE ►► bit.ly/3c2jDEn
//BOOKS
Privilege Escalation Techniques ►► amzn.to/3ylCl33
Docker Security Essentials (FREE) ►► bit.ly/3pDcFuA
//SUPPORT THE CHANNEL
NordVPN Affiliate Link (73% Off) ►► bit.ly/3DEPbu5
Get $100 In Free Linode Credit ►► bit.ly/3yagvix
//CYBERTALK PODCAST
Spotify ►► spoti.fi/3lP65jv
Apple Podcasts ►► apple.co/3GsIPQo
//WE VALUE YOUR FEEDBACK
We hope you enjoyed the video and found value in the content. We value your feedback, If you have any questions or suggestions feel free to post them in the comments section or contact us directly via our social platforms.
//THANK YOU!
Thanks for watching!
Благодарю за просмотр!
Kiitos katsomisesta
Danke fürs Zuschauen!
感谢您观看
Merci d'avoir regardé
Obrigado por assistir
دیکھنے کے لیے شکریہ
देखने के लिए धन्यवाद
Grazie per la visione
Gracias por ver
شكرا للمشاهدة
-----------------------------------------------------------------------------------
#Pentesting#Cybersecurity

[@roccoranallo4027]

Dude your videos are so fire, I got a bachelors in cyber and I have learned soooooo much from your videos because of the way you explain the concepts, bought your book too looking forward to reading it, Thank you!

[@0x1sac]

@Michael Van Winkle I KNOW ALL THE BEST SHORTCUTS, YOU JUST HAVE TO-

[@jpierce2l33t]

Dude, another great one! I've been wanting to get into more web stuff, and bug bounties etc..and this stuff is invaluable! I know Burp some, but only have the community edition...just downloaded ZAP and have started to learn it a bit. I just noticed you had some videos using that as well!

[@skynet.yousha]

High quality explanation, Alexis!! Well keep it up. Learned lots from you.

[@ICOFRITE]

Alexis you are genuinely a marvel. Thank you so much for all you do

[@homeofcreation]

Excellent demo with explanations. Thank you very much.

[@vladyslavv3154]

Huge appreciation for this video, keep it up, man!

[@rudrasalaria3431]

Always waiting for your video. Thank you Sir. Lots of Love from India 🇮🇳 ♥️

[@Sc00by383]

Thanks Alexis giving me great knowledge of this.

[@DG-if3gs]

i always like your sharing without looking at it. i know that they are valuable.

[@justkiddieng6317]

More web and network penetration videos bro. That would be great.

[@arenaesports2580]

Great knowledge comes from a great heart. 👍🏻

[@gonzalogermano2312]

awesome video and very easy to understand , keep up the excellent knowledge level!!! thanks

[@rishabhrana3773]

Your videos never disappoint

[@emanuelepicariello]

Great and useful video, thanks!

[@CloudSecWithRay]

Great content as always

[@RafaelLima-ox9ul]

Awesome! Thanks for sharing!

[@MrHT1993]

Thank you so much for this great content. Can you please number and compile your latest web app pentesting videos into a playlist? They will be much easier to follow that way. Thank you very much.

[@localhost4356]

Amazing & Excellent

[@ghostesprit4403]

Education is the key!

[@TheConstantLearnerGuy]

Is there any well structured and complete Web App Pentesting course of yours ? Paid will do the work too.

[@venomx2131]

Superb bro

[@pakcyberteam]

شکریہ

[@cannonkain375]

this was really useful.

[@geniusesml3700]

Thank you senpai

[@minkang6841]

Thank you for sharing

[@hackeranonymous9565]

Love you 💞😘 bro 🤗

[@hacking9077]

Great. Can you please do a video about pentesting report writing?

[@itsme7570]

Cool extension

[@mn.raunaq]

thank you!

[@modmah7191]

Thanks!

[@vinay5265]

Pls make a videos on powershell and bash script

[@VishalRadan]

is it comes under xss bug?? when we perform in live site and get cookies of the session

[@phinehasantwi9615]

Thanks alot

[@oleglivcha5041]

Actually the browser itself is concerned with cookie expiration date,if it has expired by the time request is made ,browser will delete it silently and make a request without adding cookie to it.I’m not sure there is a practice by which server will validate the cookie for its expiration date,correct me if I wrong.Thanks

[@pakcyberteam]

Which screen recorder do you use..

[@saumoncooking414]

yes !

[@sunnyyt4082]

sir at 12:20 before the server had sent a response , when we sent a get request a cookie had generated , so who generated cookie browser or server?

[@pawankunwar9715]

its already generated by the server when you visit that website(in this case but the cookie are same because it is vulnerable website)and when we login through the website, it is also again generate with session cookie.

[@unknownanonymous4735]

hi thanksss please make such same tutorial for SOP

[@parisbrian564]

Cool..... Alexis

[@alwan7777]

please also discuss how we know whether a hash is md5 or base64 62 and others😁

[@itsme7570]

It usually says it. Or you'll know after you crack it with for example crackstation

[@DHIRAL2908]

hash-identifier is pretty useful too!

[@alwan7777]

@Voldemort thks bro😁🙏

[@ryanlee5435]

1빠

[@konfushon]

Didn't know this dude is from Nairobi Kenya

[@suporte99py99]

Anyone use the BURP SUITE HERE? LEAVE DISCORD.

[@mahamaatir7755]

Bitcoin should be next topic

[@Jesse_Johnson]

Dude he stop making content?!

[@hackeranonymous9565]

Hacker

[@mahamaatir7755]

Hacking bitcoin videoo

[@Nkworldff]

Any one tell how to get access from old cookies in facebook anyone can help i can pay for it any one can help🥹