This site is the archived OWASP Foundation Wiki and is no longer accepting Account Requests.
To view the new OWASP Foundation website, please visit https://owasp.org

Difference between revisions of "Category:OWASP Cookies Database"

From OWASP
Jump to: navigation, search
(Added F5 and a new colum)
(Added more cookies)
Line 45: Line 45:
 
|Many
 
|Many
 
|Many appservers use this cookie
 
|Many appservers use this cookie
 +
 +
|-
 +
|ASPSESSIONIDXXXXXXXX
 +
|XXXXXXXXXXXXXXXXXXXXXXXX
 +
|unknown
 +
|[http://www.microsoft.com/ Microsoft]
 +
|[http://www.microsoft.com/technet/prodtechnol/windows2000serv/technologies/iis/default.mspx Microsoft Internet Information Services]
 +
|5.0
 +
|Application server
 +
|Many
 +
|Cookie name varies by site
 +
 +
|-
 +
|ASP.NET_SessionId
 +
|0hqed4qelkxvjj153tplacm0
 +
|unknown
 +
|[http://www.microsoft.com/ Microsoft]
 +
|[http://www.microsoft.com/iis Microsoft Internet Information Services]
 +
|6.0
 +
|Application server
 +
|Many
 +
|None
  
 
|-
 
|-
Line 60: Line 82:
 
|-
 
|-
 
|WebLogicSession
 
|WebLogicSession
−
|(too large to fi here)
+
|(too large too fit here)
 
|unknown
 
|unknown
 
|[http://www.bea.com/ BEA]
 
|[http://www.bea.com/ BEA]
Line 78: Line 100:
 
|Load balancer
 
|Load balancer
 
|TBD
 
|TBD
−
|Used to mantain persistence based on original client when balancing to a farm
+
|Used to mantain persistence based on original client when balancing to a farm. The cookie name contains the name of the web site being accessed.
 +
 
 +
|-
 +
|SaneID
 +
|A.B.C.D-1018349510644
 +
|unknown
 +
|[http://www.sane.com/ UNICA corporation]
 +
|[http://www.unica.com/product/product.cfm?pw=untng Unica NetTracker] (formerly SANE NetTracker)
 +
|Any
 +
|Tracking visitors
 +
|http://www.sane.com/
 +
|A.B.C.D is the IP address of the client accessing the site
 +
 
 +
|-
 +
|ssuid
 +
|Maxliw00vvM00001fbb6Oxn0wb
 +
|unknown
 +
|[http://www.vignette.com/ Vignette]
 +
|[http://www.vignette.com/ Vignette]
 +
|Any
 +
|Content Manager
 +
|TBD
 +
|None
 +
 
 +
|-
 +
|vgnvisitor
 +
|Mawd0M00heY0000~fBiFkE0035
 +
|unknown
 +
|[http://www.vignette.com/ Vignette]
 +
|[http://www.vignette.com/ Vignette]
 +
|Any
 +
|Content Manager
 +
|TBD
 +
|None
 +
 
 +
 
 +
|-
 +
|SESSION_ID
 +
|203363,JdjXE+hB9ph06hBJ4NSD04uHsq/FktC/rNib7MJjNS3jk5fXEK9XBtkAx0zI7NkI
 +
|unknown
 +
|[http://www.ibm.com/ IBM]
 +
|[http://www.ibm.com/ IBM Net.Commerce]
 +
|Any
 +
|Application
 +
|TBD
 +
|None
 +
 
 +
 
 +
|-
 +
|NSES40Session
 +
|2%253A3e57d375%253Adc59172283a7e72c
 +
|unknown
 +
|[http://www.redhat.com/ RedHat]
 +
|[http://enterprise.netscape.com/ Netscape Enterprise Server]
 +
|4.0
 +
|Application Server
 +
|TBD
 +
|None
 +
 
 +
 
 +
|-
 +
|iPlanetUserId
 +
|A.B.C.D:29511018555049
 +
|unknown
 +
|[http://www.sun.com/ Sun]
 +
|iPlanet web server (no longer available, replaced by SunONE web server and later by [http://www.sun.com/software/products/web_srvr/home_web_srvr.xml Java System Web Server])
 +
|6.x
 +
|Application Server
 +
|TBD
 +
|A.B.C.D is the client's IP address
  
 
|}
 
|}

Revision as of 14:10, 8 December 2006

Welcome to OWASP Cookies Database Project

OWASP Cookies Database project is aimed to collect and maintain all possible web servers/applications cookie details like cookie name, cookie value and the product name/version which generated the cookies. This database can be used to fingerprint the product name/version by comparing the cookie names and values against the database. This will enhance the accuracy of the application fingerprinting.

The database is ordered as a "reverse-lookup" to facilitate finding technologies in a testing situation. If you need to use the data in another order, we recommend copying the table into a spreadsheet and sorting it according to your needs.

Please help us grow the database by adding the cookies from your technology. To gather the appropriate data, simply go to the webpage in question and type in the following in the URL bar of your browser... 

javascript:alert(document.cookie)

Then create an entry in the table below using the following format. If you don't know what product or version are involved, please leave them blank, and perhaps others will be able to help you. Note, you may want to change a few bytes in the example cookie value so that you aren't disclosing a secret cookie value. 

|-
|wiki18_session
|qfn5s9|14upcs5b29prn7al090
|unknown
|MediaWiki
|MediaWiki
|1.8
|Used at http://www.wikipedia.com
|None

Cookie Database

Cookie Name Example Value Cookie Format Company Name Product Name Product Version Product Type Example Site Notes
JSESSIONID unknown Many Many Any J2EE Application server Many Many appservers use this cookie
ASPSESSIONIDXXXXXXXX XXXXXXXXXXXXXXXXXXXXXXXX unknown Microsoft Microsoft Internet Information Services 5.0 Application server Many Cookie name varies by site
ASP.NET_SessionId 0hqed4qelkxvjj153tplacm0 unknown Microsoft Microsoft Internet Information Services 6.0 Application server Many None
wiki18_session 14upcs5b29prn7al090 unknown MediaWiki MediaWiki 1.8 Content Management Server http://www.wikipedia.com/ None


WebLogicSession (too large too fit here) unknown BEA BEA WebLogic Any J2EE Application server TBD None
BIGipServerxxx_xxx_xxx_p1 2893454590.19741.0000 unknown F5 F5 BIG-IP Any Load balancer TBD Used to mantain persistence based on original client when balancing to a farm. The cookie name contains the name of the web site being accessed.
SaneID A.B.C.D-1018349510644 unknown UNICA corporation Unica NetTracker (formerly SANE NetTracker) Any Tracking visitors http://www.sane.com/ A.B.C.D is the IP address of the client accessing the site
ssuid Maxliw00vvM00001fbb6Oxn0wb unknown Vignette Vignette Any Content Manager TBD None
vgnvisitor Mawd0M00heY0000~fBiFkE0035 unknown Vignette Vignette Any Content Manager TBD None


SESSION_ID 203363,JdjXE+hB9ph06hBJ4NSD04uHsq/FktC/rNib7MJjNS3jk5fXEK9XBtkAx0zI7NkI unknown IBM IBM Net.Commerce Any Application TBD None


NSES40Session 2%253A3e57d375%253Adc59172283a7e72c unknown RedHat Netscape Enterprise Server 4.0 Application Server TBD None


iPlanetUserId A.B.C.D:29511018555049 unknown Sun iPlanet web server (no longer available, replaced by SunONE web server and later by Java System Web Server) 6.x Application Server TBD A.B.C.D is the client's IP address

Volunteers Needed

If you are interested in participating this project, drop a mail to syedma 'at' microland.net. The sucess of this project depends on more and more number of participants and cookie signatures

This category currently contains no pages or media.

Retrieved from "https://wiki.owasp.org/index.php?title=Category:OWASP_Cookies_Database&oldid=14044"