This site is the archived OWASP Foundation Wiki and is no longer accepting Account Requests.
To view the new OWASP Foundation website, please visit https://owasp.org
Category:OWASP Cookies Database
Welcome to OWASP Cookies Database Project
OWASP Cookies Database project is aimed to collect and maintain all possible web servers/applications cookie details like cookie name, cookie value and the product name/version which generated the cookies. This database can be used to fingerprint the product name/version by comparing the cookie names and values against the database. This will enhance the accuracy of the application fingerprinting.
The database is ordered as a "reverse-lookup" to facilitate finding technologies in a testing situation. If you need to use the data in another order, we recommend copying the table into a spreadsheet and sorting it according to your needs.
Please help us grow the database by adding the cookies from your technology. To gather the appropriate data, simply go to the webpage in question and type in the following in the URL bar of your browser...
javascript:alert(document.cookie)
Then create an entry in the table below using the following format. If you don't know what product or version are involved, please leave them blank, and perhaps others will be able to help you. Note, you may want to change a few bytes in the example cookie value so that you aren't disclosing a secret cookie value.
|- |wiki18_session |qfn5s9|14upcs5b29prn7al090 |unknown |MediaWiki |MediaWiki |1.8 |Used at http://www.wikipedia.com |None
Cookie Database
| Cookie Name | Example Value | Cookie Format | Company Name | Product Name | Product Version | Product Type | Example Site | Notes |
| JSESSIONID | unknown | Many | Many | Any | J2EE Application server | Many | Many appservers use this cookie including Claudio Resin, Jakarta Tomcat/JSERV, Macromedia Jrun | |
| ASPSESSIONIDXXXXXXXX | XXXXXXXXXXXXXXXXXXXXXXXX | unknown | Microsoft | Microsoft Internet Information Services | 5.0 | Application server | Many | Cookie name varies by site |
| ASP.NET_SessionId | 0hqed4qelkxvjj153tplacm0 | unknown | Microsoft | Microsoft Internet Information Services | 6.0 | Application server | Many | None |
| wiki18_session | 14upcs5b29prn7al090 | unknown | MediaWiki | MediaWiki | 1.8 | Content Management Server | http://www.wikipedia.com/ | None
|
| WebLogicSession | (too large too fit here) | unknown | BEA | BEA WebLogic | Any | J2EE Application server | TBD | None |
| BIGipServerxxx_xxx_xxx_PROTO | 2893454590.19741.0000 | unknown | F5 | F5 BIG-IP | Any | Load balancer | TBD | Used to mantain persistence based on original client when balancing to a farm. The cookie name contains the name of the web site being accessed as weel as the protocol used. |
| SaneID | A.B.C.D-1018349510644 | unknown | UNICA corporation | Unica NetTracker (formerly SANE NetTracker) | Any | Tracking visitors | http://www.sane.com/ | A.B.C.D is the IP address of the client accessing the site |
| ssuid | Maxliw00vvM00001fbb6Oxn0wb | unknown | Vignette | Vignette | Any | Content Manager | TBD | None |
| vgnvisitor | Mawd0M00heY0000~fBiFkE0035 | unknown | Vignette | Vignette | Any | Content Manager | TBD | None
|
| SESSION_ID | (too large too fit here) | unknown | IBM | IBM Net.Commerce | Any | Application | TBD | None
|
| NSES40Session | 2%253A3e57d375%253Adc59172283a7e72c | unknown | RedHat | Netscape Enterprise Server | 4.0 | Application Server | TBD | None
|
| iPlanetUserId | A.B.C.D:29511018555049 | unknown | Sun | iPlanet web server (discontinued, replaced by SunONE web server and later by Java System Application Server) | 6.x | Application Server | TBD | A.B.C.D is the client's IP address |
| gx_session_id_ | f42d0282513ff402 | unknown | Sun | [www.sun.com/software/products/appsrvr/index.xml Java System ApplicationServer]) | TBD | Application Server | TBD | None.
|
| RMID | d442af2b3d1ccf30 | unknown | Real | RealMedia OpenAdStream | 6.x | Media Server | TBD | None |
| JSESSIONID | afbx7QRlFZje | unknown | TBD | Claudio Resin | TBD | J2EE Application server | Many | None |
| JSESSIONID | 4ah34a8xo1 | unknown | Apache Foundation | Jakarta Tomcat/JSERV | TBD | J2EE Application server | Many | None |
| JSESSIONID | 80302068121025709932681 | unknown | Macromedia | Macromedia Jrun | TBD | J2EE Application server | Many | None
|
| RoxenUserID | 07761bc31df67ae8c4441a89bc7ceed5 | unknown | Roxen | Roxen Web Server | TBD | Web server | Many | None
|
| JServSessionIdroot | vvni7vxu8n | unknown | Apache Foundation | ApacheJServ | TBD | Web server | Many | None
|
| sesessionid | ZJ0DMWIAAA51VQFI50BD0VA | unknown | IBM | IBM WebSphere Application Server | TBD | Web server | Many | None |
| PD-S-SESSION-ID | 2_xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx | unknown | IBM | IBM Tivoli Access Manager WebSeal (part of the IBM TAM for e-business) | 5.x, 6.x | Reverse authentication proxy | Many | Where 'x' is {[A-Z],[a-z],[0-9],+,-}. The cookie is set as 'Secure' |
| PD_STATEFUL_xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx | /LOCATION | unknown | IBM | IBM Tivoli Access Manager WebSeal (part of the IBM TAM for e-business) | 5.x, 6.x | Reverse authentication proxy | Many | This cookie is used when accessing an authenticated area.
|
| WEBTRENDS_ID | A.B.C.D-1091519275.658578 | unknown | WebTrends | WebTrends | TBD | Tracking visitors | Many | None. |
Volunteers Needed
If you are interested in participating this project, drop a mail to syedma 'at' microland.net. The sucess of this project depends on more and more number of participants and cookie signatures
This category currently contains no pages or media.
