Hacking Cookies in Modern Web Applications and Browsers

Explore cookie-related vulnerabilities in modern web applications and browsers in this 45-minute conference talk from HITB GSEC 2015. Delve into topics such as insecure processing of secure flags, bypassing HttpOnly flags, cookie tampering, and underestimated XSS via cookies. Learn about the importance of secure cookie processing from both web application and browser perspectives, including discussions on HTTP Strict Transport Security (HSTS), the significance of session regeneration, and server-side invalidation. Gain insights from security expert Dawid Czagan, who has discovered vulnerabilities in major tech companies and shares his experience in bug hunting and web application security.