NETRIX SL / WEB SECURITY ARENA

The Cookie Crumbles

Insecure cookie trust

Lab 06 / 13 · Return to Arena

Welcome to this intentionally vulnerable training application.

Objective: Insecure cookie trust. Inspect requests and responses with Burp Suite or browser developer tools. Use only the synthetic accounts and data supplied here.

Do not attack the arena portal or any system outside this lab.

Starting point: Inspect the demo cookie

Demo preference cookie: theme=light

Try the account page and inspect cookie handling.

Authorized training only · synthetic data · lab 06