Cyber Risks · PortSwigger Research

Cookie Monster

Summary: PortSwigger's BApp Store lists CookieMonster, a Burp Suite extension by Simon Baeg, version 1.0.0, last updated 23 May 2024, that filters cookies in requests using the categorized Open-Cookie-Database. By default it filters cookies marked non-functional in that database, supports wildcard filtering such as "_ga" matching "_gac_1234", and saves cookie configurations on a per-project basis.

Bottom line: The extension is third-party code, and PortSwigger states it makes no warranty about its quality or usefulness, so the tool that trims cookies from your test traffic carries the same trust question as anything else installed into Burp.

Read the original at PortSwigger Research ↗

Topics
Vulnerabilities & Patching
Related