Hands-On Web Penetration Testing with Metasploit

Scenario 1 – Cookie header fuzzing

Let's take a look at the following scenario. We have a PHP file, - cookie_test.php. We request this file with the Cookie flag as lang=en_us.php:

The server responds with the message Language in use: English:

From the en_us.php file, we may think that the cookie parameter is including the file from the server (file inclusion) and executing the file, which, in turn, is printing the message from the server.

Let's now see how we can fuzz the cookie header using Wfuzz:

As we can see in the preceding screenshot, ...