Foundstone CookieDigger

CookieDigger helps identify weak cookie generation and insecure implementations of session management by web applications.

The tool works by collecting and analyzing cookies issued by a web application for multiple users. The tool reports on the predictability and entropy of the cookie and whether critical information, such as user name and password, are included in the cookie values.