MySeq (#SimplifyCybersecurity #EssentialSecurity)

Simplicity is the Ultimate Sophistication

Pages

/home/myseq/blog
/etc/qotd
~/.plan
~/.projects
~/.settings

Nov 11, 2016

BIG-IP-Cookie-decoding

Tags: [PoC], Big-IP

Found a POC that decode cookie values from BIG-IP load balancers >= 10.0.0

Links:

https://github.com/evict/BIG-IP-Cookie-decoding

Email This BlogThis!Share to X Share to Facebook Share to Pinterest

Newer Post Older Post Home

Search MySEQ

Tags

[⚝] (6) [1Kword] (1) [8thgrade] (1) [AI/ML] (3) [Azure] (23) [Backdoor] (5) [cli] (28) [cloud] (21) [crypto] (5) [cti] (7) [cve] (33) [cwe] (2) [Cybersecurity] (14) [DFIR] (2) [DO285] (1) [drone] (1) [EssentialSecurity] (20) [exposure] (3) [FOR610] (1) [GPYC] (1) [GREM] (1) [Human] (1) [ioc] (4) [Kenna] (30) [notes] (1) [pcap] (3) [PoC] (9) [quote] (8) [Rapid7] (2) [recon] (12) [SEC503] (1) [SEC540] (2) [SEC573] (1) [SEC642] (1) [strategy] (9) [training] (13) [ttp] (4) [Vuln] (16) [VulnerabilityScan] (13) [VulnMgmt] (5) [VulnResearch] (6) [webinar] (38) [WFA] (2) 🐍 (53) 0day (32) 1liner (2) 2FA (5) 30seconds (10) 404 (1) activeX (5) adm (1) ADsec (19) AES (1) Agile (3) AHCI (1) airport (2) AJAX (2) Alsid (1) analyzer (2) Android (14) Angry Birds (1) antivirus (2) AOKP (1) apk (5) Apple (1) appscan (4) APT (2) Arduino (1) articles (8) ascii (2) attack (26) audit (7) authentication (5) AWS (1) BH09 (5) Big-IP (1) BIND 9 (1) Bing (2) BIOS (1) BitLocker (1) Bookmarklet (1) books (2) bootkit (1) Bossa Vino (5) breaches (9) browser (4) BSOD (8) bt4 (12) bt5 (3) bug (2) BurpSuitePro (2) chatGPT (2) CISA (11) Cisco (6) cloud computing (5) cloud-init (1) cmdline (78) compiler (2) compliance (5) conference (2) container (8) Counter Intelligence (1) crack (6) crash (1) CSP (1) CSV (1) CVRF (1) CVSS (12) DAST (1) database (2) debugger (2) defaultpassword (2) DEFCON (1) Defender (3) Dell (7) DevMode (1) DevOps (6) DevSecOps (5) discovery (1) distributed computing (1) dns (7) docker (23) DoH (1) Doreamon (1) DoS (9) dotfiles (2) easter egg (10) Edge (3) enumeration (1) EPSS (5) error (14) evasion (3) Excel (5) exploitation (10) Facebook (11) firefox (13) Flash (2) forensic (9) fragattack (1) fun (4) fuzzer (1) G+ (2) game (2) GHA (4) GHDB (1) github (11) GitOps (2) GitSecOps (1) GMail (7) GnackTrack (1) Go (1) Google (29) Google Chrome (21) Google Reader (6) googledorks (1) governance (2) GraphQL (1) GREM (2) GRUB (1) GTalk (3) hacker (9) hacknotes (1) hash (1) helloWorld (3) Hetty (1) hijack (3) history (2) HITB09 (6) Hostmap (1) Hotmail (1) hsbb (1) HSTS (3) HTML5 (7) http (12) IaaS (1) IaC (1) IAM (1) IBM (3) icmp (3) ICS (6) IIS (1) impress.js (1) infosec (27) InfoSec Mag (1) InsightVM (1) Intel (1) Intellectual Property (1) InTheField (1) IoT (3) ip-over-dns (1) ip-over-icmp (1) iPhone (9) ipmi (1) ipv6 (5) IR (5) ism (4) iso27000 (4) issue (2) IT framework (3) Java (7) javascript (7) Jenkins (1) joke (10) JSON (9) Julia (1) K3s (1) K8s (18) K9s (1) Kafka (1) Kali (1) keynote (1) Lab21 (10) Learn101 (7) linux (47) Live.com (1) lpe (1) MAC (1) makeuseof (1) malware (4) marathon (1) MBR (2) md5 (1) metadata (1) metasploit (5) MI5 (1) microk8s (1) microsoft (16) mis-configuration (6) mitm (4) MIUI (2) mobile (2) modsecurity (1) motd (1) msdn (1) msf (3) msie (8) MSN (1) multipass (17) myemail (1) mysql (2) NaCl (1) Network Solutions (1) Nexus S (5) nginx (5) NIST (5) nmap (4) node.js (5) NSA (1) NTFS (4) NTLM (1) nuclei (1) OAuth (2) Octant (1) office (8) Office365 (1) OIDC (1) omi (2) Oneplus1 (1) online (2) OpenAI (3) OpenShift (1) opensource (15) OpenSSF (2) OpenVAS (1) Oracle (2) OS (2) OSINT (2) OVAL (2) OWASP (5) packet generator (1) PacMan (2) Palo_Alto (1) parking meter (1) passwordless (1) patching (4) PatchTuesday (7) PCI DSS (1) pentest (29) perl (1) phishing (2) picasa (1) Portainer (1) PowerBI (1) powershell (9) presentation (2) programming (5) ProjectDiscovery (4) proxy (4) pstools (1) python (68) ransomware (1) RBAC (1) rce (9) reconnaissance (13) RedHat (2) REM (13) REST-API (2) Risk Management (6) robtex (1) rootkit (4) router (3) RPi (19) ruby (1) Rust (1) Samsung (1) SANS (10) SAST (2) SCA (1) SCAP (2) scapy (2) screen (3) script (3) sdiff (1) SDLC (4) SELinux (1) SEM (1) Sentinel (3) servicepack (1) shadon (1) shebang (3) shellcode (1) shellshock (2) SIEM (2) Skype (1) smartphone (1) smb2 (2) smbv1 (1) sniffer (3) software security (2) spoofing (2) Spring (1) SpyOnWeb (1) sqlinjection (5) squid (1) ssh (8) SSL/TLS (13) starwars (1) steganography (1) storage (2) Sucuri (1) sudo (2) SupplyChain (1) syncookies (2) sysadm (16) systemd (2) TCP Timestamp (1) tcp/ip (6) tcpdump (1) Teams (1) telegram (1) telnet (2) Tenable (1) Tenable Nessus (3) threat (1) tiddlywiki (1) tips (48) tmux (1) tools (92) tracking (1) Trustware (1) tshark (1) tun0 (1) tunnel (1) Twitter (3) UAC (1) Ubuntu (18) unifi (1) Unity (1) unix (3) USB (5) utils (7) uTorrent (1) vim (9) virtualization (11) vista (20) visualization (2) vmware (9) VPN (3) vscode (1) vulnerability (9) vulscan (9) W2K (2) W2K3 (2) W2K8 (6) W7 (25) wasm (1) weapon (1) Web 2.0 (2) webapp (7) WebM (1) WebP (1) WebSocket (2) whois (4) wifi (7) win10 (6) win11 (5) Windows (13) winget (1) wireless (2) wireshark (1) wmic (1) worm (1) wpa2 (1) WSL (4) WXP (1) XML (1) XP (7) XSRF (4) XSS (6) YAML (6) YouTube (4) ZeroTrust (4) ZMap (1) zsh (7)

Blogroll

Kali Linux Tutorials

Bomber : Navigating Security Vulnerabilities In SBOMs
3 days ago
Windows Command Line

What’s new in the Windows Subsystem for Linux in November 2024
4 days ago
Hacking Articles

Abusing AD-DACL: AllExtendedRights
1 week ago
TaoSecurity

What Are Normal Users Supposed to Do with IDS Alerts from Network Gear?
1 month ago
{turnoff.us}

Blue Screen of Death
4 months ago
PacketLife

Book Review: Model-Driven DevOps
1 year ago

Show 5 Show All

Links

github.com/MySeq

Blog Archive

► 2022 (221)
- December (16)
- November (11)
- October (27)
- September (27)
- August (23)
- July (17)
- June (13)
- May (22)
- April (20)
- March (15)
- February (14)
- January (16)

► 2021 (175)
- December (14)
- November (23)
- October (14)
- September (12)
- August (9)
- July (22)
- June (18)
- May (12)
- April (12)
- March (13)
- February (15)
- January (11)

► 2020 (33)
- December (8)
- November (4)
- October (3)
- September (2)
- August (3)
- July (2)
- June (2)
- May (1)
- April (2)
- March (2)
- February (3)
- January (1)

► 2019 (8)
- October (1)
- August (2)
- May (2)
- January (3)

► 2018 (4)
- December (1)
- November (1)
- September (1)
- August (1)

► 2017 (3)
- December (1)
- September (1)
- February (1)

▼ 2016 (3)
- December (1)
- November (1)
- February (1)

► 2015 (9)
- December (1)
- September (1)
- June (1)
- May (3)
- April (2)
- March (1)

► 2014 (37)
- November (1)
- October (1)
- September (1)
- August (2)
- July (4)
- June (4)
- May (8)
- February (4)
- January (12)

► 2013 (18)
- October (1)
- September (4)
- July (5)
- June (6)
- January (2)

► 2012 (28)
- December (1)
- October (5)
- September (6)
- August (2)
- July (2)
- June (2)
- May (9)
- January (1)

► 2011 (96)
- December (3)
- November (9)
- October (5)
- September (2)
- August (3)
- July (10)
- June (12)
- May (15)
- April (9)
- March (6)
- February (7)
- January (15)

► 2010 (95)
- December (26)
- November (16)
- October (7)
- September (11)
- August (9)
- July (13)
- June (5)
- May (2)
- April (1)
- March (3)
- January (2)

► 2009 (92)
- October (9)
- September (11)
- August (3)
- July (17)
- June (13)
- May (6)
- April (22)
- March (6)
- February (5)

► 2008 (107)
- December (2)
- November (10)
- October (9)
- September (24)
- August (18)
- July (23)
- June (9)
- May (4)
- April (1)
- March (2)
- February (3)
- January (2)

► 2007 (25)
- December (3)
- October (1)
- September (1)
- August (1)
- July (1)
- June (4)
- March (2)
- February (10)
- January (2)

► 2006 (16)
- December (5)
- September (1)
- May (9)
- April (1)

► 2004 (2)
- September (2)

Awesome Inc. theme. Powered by Blogger.