Foundstone CookieDigger is a tool designed to help identify weak cookie generation and insecure implementations of session management in web applications. It works by collecting and analyzing cookies issued by a web application for multiple users. The tool reports on the predictability and entropy of the cookie and whether important information such as user name and password are included in the cookie values.
Comments