This site is the archived OWASP Foundation Wiki and is no longer accepting Account Requests.
To view the new OWASP Foundation website, please visit https://owasp.org
Difference between revisions of "Category:OWASP Cookies Database"
(Added Bea's) |
(Added F5 and a new colum) |
||
| Line 31: | Line 31: | ||
|Product Name | |Product Name | ||
|Product Version | |Product Version | ||
| + | |Product Type | ||
|Example Site | |Example Site | ||
|Notes | |Notes | ||
| + | |||
| + | |- | ||
| + | |JSESSIONID | ||
| + | | | ||
| + | |unknown | ||
| + | |Many | ||
| + | |Many | ||
| + | |Any | ||
| + | |J2EE Application server | ||
| + | |Many | ||
| + | |Many appservers use this cookie | ||
|- | |- | ||
| Line 38: | Line 50: | ||
|qfn5s9|14upcs5b29prn7al090 | |qfn5s9|14upcs5b29prn7al090 | ||
|unknown | |unknown | ||
| − | |[http://www.mediawiki.org MediaWiki] | + | |[http://www.mediawiki.org/ MediaWiki] |
|[http://www.mediawiki.org/wiki/MediaWiki MediaWiki] | |[http://www.mediawiki.org/wiki/MediaWiki MediaWiki] | ||
|1.8 | |1.8 | ||
| − | |http://www.wikipedia.com | + | |Content Management Server |
| + | |http://www.wikipedia.com/ | ||
|None | |None | ||
| Line 47: | Line 60: | ||
|- | |- | ||
|WebLogicSession | |WebLogicSession | ||
| − | | | + | |(too large to fi here) |
|unknown | |unknown | ||
| − | |[http://www.bea | + | |[http://www.bea.com/ BEA] |
|[http://www.bea.com/framework.jsp?CNT=index.htm&FP=/content/products/weblogic BEA WebLogic] | |[http://www.bea.com/framework.jsp?CNT=index.htm&FP=/content/products/weblogic BEA WebLogic] | ||
|Any | |Any | ||
| + | |J2EE Application server | ||
| + | |TBD | ||
| + | |None | ||
| + | |||
| + | |- | ||
| + | |BIGipServerxxx_xxx_xxx_p1 | ||
| + | |2893454590.19741.0000 | ||
|unknown | |unknown | ||
| − | | | + | |[http://www.f5.com/ F5] |
| + | |[http://www.f5.com/products/bigip/ F5 BIG-IP] | ||
| + | |Any | ||
| + | |Load balancer | ||
| + | |TBD | ||
| + | |Used to mantain persistence based on original client when balancing to a farm | ||
|} | |} | ||
Revision as of 13:58, 8 December 2006
Welcome to OWASP Cookies Database Project
OWASP Cookies Database project is aimed to collect and maintain all possible web servers/applications cookie details like cookie name, cookie value and the product name/version which generated the cookies. This database can be used to fingerprint the product name/version by comparing the cookie names and values against the database. This will enhance the accuracy of the application fingerprinting.
The database is ordered as a "reverse-lookup" to facilitate finding technologies in a testing situation. If you need to use the data in another order, we recommend copying the table into a spreadsheet and sorting it according to your needs.
Please help us grow the database by adding the cookies from your technology. To gather the appropriate data, simply go to the webpage in question and type in the following in the URL bar of your browser...
javascript:alert(document.cookie)
Then create an entry in the table below using the following format. If you don't know what product or version are involved, please leave them blank, and perhaps others will be able to help you. Note, you may want to change a few bytes in the example cookie value so that you aren't disclosing a secret cookie value.
|- |wiki18_session |qfn5s9|14upcs5b29prn7al090 |unknown |MediaWiki |MediaWiki |1.8 |Used at http://www.wikipedia.com |None
Cookie Database
| Cookie Name | Example Value | Cookie Format | Company Name | Product Name | Product Version | Product Type | Example Site | Notes |
| JSESSIONID | unknown | Many | Many | Any | J2EE Application server | Many | Many appservers use this cookie | |
| wiki18_session | 14upcs5b29prn7al090 | unknown | MediaWiki | MediaWiki | 1.8 | Content Management Server | http://www.wikipedia.com/ | None
|
| WebLogicSession | (too large to fi here) | unknown | BEA | BEA WebLogic | Any | J2EE Application server | TBD | None |
| BIGipServerxxx_xxx_xxx_p1 | 2893454590.19741.0000 | unknown | F5 | F5 BIG-IP | Any | Load balancer | TBD | Used to mantain persistence based on original client when balancing to a farm |
Volunteers Needed
If you are interested in participating this project, drop a mail to syedma 'at' microland.net. The sucess of this project depends on more and more number of participants and cookie signatures
This category currently contains no pages or media.
