Skip to content

Files

Latest commit

author
carlospolop
Mar 5, 2023
f0e09e3 · Mar 5, 2023

History

History
43 lines (19 loc) · 3.65 KB

File metadata and controls

43 lines (19 loc) · 3.65 KB
HackTricks in 🐦 Twitter 🐦 - 🎙️ Twitch Wed - 18.30(UTC) 🎙️ - 🎥 Youtube 🎥

A cookie bomb is the capability of adding a large number of large cookies to a user for a domain and its subdomains with the goal that the victim will always send large HTTP requests to the server (due to the cookies) the server won't accept the request. Therefore, this will cause a DoS over a user in that domain and subdomains.

A nice example can be seen in this write-up: https://hackerone.com/reports/57356

And for more information, you can check this presentation: https://speakerdeck.com/filedescriptor/the-cookie-monster-in-your-browsers?slide=26

HackTricks in 🐦 Twitter 🐦 - 🎙️ Twitch Wed - 18.30(UTC) 🎙️ - 🎥 Youtube 🎥