Skip to content
GitLab
Projects Groups Snippets
  • /
  • Help
    • Help
    • Support
    • Community forum
    • Submit feedback
    • Contribute to GitLab
  • Sign in / Register
  • A arachni
  • Project information
    • Project information
    • Activity
    • Labels
    • Members
  • Repository
    • Repository
    • Files
    • Commits
    • Branches
    • Tags
    • Contributors
    • Graph
    • Compare
  • Issues 125
    • Issues 125
    • List
    • Boards
    • Service Desk
    • Milestones
  • Merge requests 8
    • Merge requests 8
  • CI/CD
    • CI/CD
    • Pipelines
    • Jobs
    • Schedules
  • Deployments
    • Deployments
    • Environments
    • Releases
  • Packages and registries
    • Packages and registries
    • Package Registry
    • Infrastructure Registry
  • Monitor
    • Monitor
    • Incidents
  • Analytics
    • Analytics
    • Value stream
    • CI/CD
    • Repository
  • Wiki
    • Wiki
  • Snippets
    • Snippets
  • Activity
  • Graph
  • Create a new issue
  • Jobs
  • Commits
  • Issue Boards
Collapse sidebar
  • Arachni - Web Application Security Scanner Framework
  • arachni
  • Issues
  • #593
Closed
Open
Issue created Jun 17, 2015 by Administrator@rootContributor

Bug in Cookie parser

Created by: tunnelshade

Application is returning the following cookie

Set-Cookie: rsession="06142010_0%3Ae275d357943e9a2de0a5ea87050da87596fcba0451aedb53905480545e7195968f82fec971b709f4bba6271404179fc97909c7fd23766b68eb7e70bce5f9b6bd";

But subsequent requests from Arachni are sent with the following cookie

Cookie: rsession=%2206142010_0:e275d357943e9a2de0a5ea87050da87596fcba0451aedb53905480545e7195968f82fec971b709f4bba6271404179fc97909c7fd23766b68eb7e70bce5f9b6bd%22

The quotes are getting url encoded and the encoding inside the cookie value is getting decoded.

Using the self sufficient package for Linux x86 from downloads page. The only plugin being used is login script.

Assignee
Assign to
Time tracking