#webapplication security

Pentesting WebApplications: From a Tester’s Perspective – Udemy Coupon

Pentesting WebApplications: From a Tester’s Perspective – Udemy Coupon

A guide for performing WebApplication Security Testing or Pentesting

      Get Discount

Pentesting WebApplications: From a Tester’s Perspective – Udemy Coupon

Pentesting WebApplications: From a Tester’s Perspective – Udemy Coupon

A guide for performing WebApplication Security Testing or Pentesting

      Get Discount

============================================================= BIGip Cookie Captured ============================================================= Cookie Name: BIGipServersubdomain.acme.com  Direction:   Sent  Value:       2064452106.47873.0000  Path:        /  Domain:      .subdomain.acme.com  Expires:     Thu, 21-Jul-2011 15:55:13 GMT  Source:      Server  HTTP Only:   No  Secure:      No

============================================================= BIGip Cookie Value 2064452106.47873.0000 Break down ============================================================= Cookie Format: 2064452106.47873.0000                ^^^^^^^^^^---------------- IP Address Encoded                           ^^^^^---------- Port Encoded                                 ^^^^----- Reserved for future use

============================================================= BIGip Cookie Value Decode steps IP Address ============================================================= Cookie Format: 2064452106.47873.0000                ^^^^^^^^^^---------------- IP Address Encoded

1. Convert 2064452106 to HEX from DEC     2064452106 => 7B0D0A0A 2. Reverse the bytes     7B0D0A0A => 0A0A0D7B 3. Convert each byte to decimal     0A => 10     0A => 10     0D => 13     7B => 123

    ============================================================= BIGip Cookie Value Encode steps IP Address ============================================================= IP Address: 10.10.13.123

1. Convert Each octet of IP address to HEX value from DEC     10  => 0A     10  => 0A     13  => 0D     123 => 7B 2. Reverse the bytes     0A0A0D7B => 7B0D0A0A 3. Convert the HEX value to DEC     7B0D0A0A => 2064452106    

============================================================= BIGip Cookie Value Decode steps Port ============================================================= Cookie Format: 2064452106.47873.0000                           ^^^^^----------- Port Encoded

1. Convert 47873 to HEX from DEC     47873d => BB01h 2. Reverse the bytes     BB01h => 01BBh 3. Convert 01BB to DEC from HEX     01BBh => 443    

============================================================= BIGip Cookie Value Encode steps Port ============================================================= Port: 443

1. Convert 443 to HEX from DEC     443 => 01BBh 2. Reverse the bytes     01BBh => BB01h 3. Convert 01BB to DEC from HEX     BB01h => 47873     ==========================================================================================================================    ========================================================================================================================== ==========================================================================================================================     The persistence cookie for a host in a non-default route domain is the concatenation of:

    rd     <The route domain ID>     o     00000000000000000000ffff     <The hexadecimal representation of the IP address of the pool member>     o     <The port number of the pool member>

For example, if a connection was load balanced to the 192.0.2.1%5:80 pool member, the BIG-IP system would insert the following cookie: