Hands-On Web Penetration Testing with Metasploit

Scenario 2 – User-defined cookie header fuzzing

This scenario is different to the previous one. In this scenario, we'll request the cookie_test.php file from the server with the lang=en_us cookie value attached to it:

The server responds with Unauthorized Access!, as we can see in the following screenshot:

With just the normal request, the server echoes the defined cookie back to us:

Let's say our goal is to access the home.php file but it's ...