RSS feed
PortSwigger Research
Feed: https://portswigger.net/research/rss
- type
- RSS feed
- trust
- High
- interval
- 720m
- last fetched
- Oct 19, 2026, 6:00 AM
stream · public
1 item- Entrypublished Jan 22, 2025, 2:45 PM
Stealing HttpOnly cookies with the cookie sandwich technique
In this post, I will introduce the "cookie sandwich" technique which lets you bypass the HttpOnly flag on certain servers. This research follows on from Bypassing WAFs with the phantom $Version cookie