MySeq (#SimplifyCybersecurity #EssentialSecurity)

Simplicity is the Ultimate Sophistication

Pages

/home/myseq/blog
/etc/qotd
~/.plan
~/.projects
~/.settings

Nov 11, 2016

BIG-IP-Cookie-decoding

Tags: [PoC], Big-IP

Found a POC that decode cookie values from BIG-IP load balancers >= 10.0.0

Links:

https://github.com/evict/BIG-IP-Cookie-decoding

Email This BlogThis!Share to Twitter Share to Facebook Share to Pinterest

Newer Post Older Post Home

Search MySEQ

Tags

[⚝] (6) [1Kword] (1) [8thgrade] (1) [AI/ML] (3) [Azure] (23) [Backdoor] (5) [cli] (28) [cloud] (21) [crypto] (5) [cti] (7) [cve] (33) [cwe] (2) [Cybersecurity] (14) [DFIR] (2) [DO285] (1) [drone] (1) [EssentialSecurity] (20) [exposure] (3) [FOR610] (1) [GPYC] (1) [GREM] (1) [Human] (1) [ioc] (4) [Kenna] (30) [notes] (1) [pcap] (3) [PoC] (9) [quote] (8) [Rapid7] (2) [recon] (12) [SEC503] (1) [SEC540] (2) [SEC573] (1) [SEC642] (1) [strategy] (9) [training] (13) [ttp] (4) [Vuln] (16) [VulnerabilityScan] (13) [VulnMgmt] (5) [VulnResearch] (6) [webinar] (38) [WFA] (2) 🐍 (53) 0day (32) 1liner (2) 2FA (5) 30seconds (10) 404 (1) activeX (5) adm (1) ADsec (19) AES (1) Agile (3) AHCI (1) airport (2) AJAX (2) Alsid (1) analyzer (2) Android (14) Angry Birds (1) antivirus (2) AOKP (1) apk (5) Apple (1) appscan (4) APT (2) Arduino (1) articles (8) ascii (2) attack (26) audit (7) authentication (5) AWS (1) BH09 (5) Big-IP (1) BIND 9 (1) Bing (2) BIOS (1) BitLocker (1) Bookmarklet (1) books (2) bootkit (1) Bossa Vino (5) breaches (9) browser (4) BSOD (8) bt4 (12) bt5 (3) bug (2) BurpSuitePro (2) chatGPT (2) CISA (11) Cisco (6) cloud computing (5) cloud-init (1) cmdline (78) compiler (2) compliance (5) conference (2) container (8) Counter Intelligence (1) crack (6) crash (1) CSP (1) CSV (1) CVRF (1) CVSS (12) DAST (1) database (2) debugger (2) defaultpassword (2) DEFCON (1) Defender (3) Dell (7) DevMode (1) DevOps (6) DevSecOps (5) discovery (1) distributed computing (1) dns (7) docker (23) DoH (1) Doreamon (1) DoS (9) dotfiles (2) easter egg (10) Edge (3) enumeration (1) EPSS (5) error (14) evasion (3) Excel (5) exploitation (10) Facebook (11) firefox (13) Flash (2) forensic (9) fragattack (1) fun (4) fuzzer (1) G+ (2) game (2) GHA (4) GHDB (1) github (11) GitOps (2) GitSecOps (1) GMail (7) GnackTrack (1) Go (1) Google (29) Google Chrome (21) Google Reader (6) googledorks (1) governance (2) GraphQL (1) GREM (2) GRUB (1) GTalk (3) hacker (9) hacknotes (1) hash (1) helloWorld (3) Hetty (1) hijack (3) history (2) HITB09 (6) Hostmap (1) Hotmail (1) hsbb (1) HSTS (3) HTML5 (7) http (12) IaaS (1) IaC (1) IAM (1) IBM (3) icmp (3) ICS (6) IIS (1) impress.js (1) infosec (27) InfoSec Mag (1) InsightVM (1) Intel (1) Intellectual Property (1) InTheField (1) IoT (3) ip-over-dns (1) ip-over-icmp (1) iPhone (9) ipmi (1) ipv6 (5) IR (5) ism (4) iso27000 (4) issue (2) IT framework (3) Java (7) javascript (7) Jenkins (1) joke (10) JSON (9) Julia (1) K3s (1) K8s (18) K9s (1) Kafka (1) Kali (1) keynote (1) Lab21 (10) Learn101 (7) linux (47) Live.com (1) lpe (1) MAC (1) makeuseof (1) malware (4) marathon (1) MBR (2) md5 (1) metadata (1) metasploit (5) MI5 (1) microk8s (1) microsoft (16) mis-configuration (6) mitm (4) MIUI (2) mobile (2) modsecurity (1) motd (1) msdn (1) msf (3) msie (8) MSN (1) multipass (17) myemail (1) mysql (2) NaCl (1) Network Solutions (1) Nexus S (5) nginx (5) NIST (5) nmap (4) node.js (5) NSA (1) NTFS (4) NTLM (1) nuclei (1) OAuth (2) Octant (1) office (8) Office365 (1) OIDC (1) omi (2) Oneplus1 (1) online (2) OpenAI (3) OpenShift (1) opensource (15) OpenSSF (2) OpenVAS (1) Oracle (2) OS (2) OSINT (2) OVAL (2) OWASP (5) packet generator (1) PacMan (2) Palo_Alto (1) parking meter (1) passwordless (1) patching (4) PatchTuesday (7) PCI DSS (1) pentest (29) perl (1) phishing (2) picasa (1) Portainer (1) PowerBI (1) powershell (9) presentation (2) programming (5) ProjectDiscovery (4) proxy (4) pstools (1) python (68) ransomware (1) RBAC (1) rce (9) reconnaissance (13) RedHat (2) REM (13) REST-API (2) Risk Management (6) robtex (1) rootkit (4) router (3) RPi (19) ruby (1) Rust (1) Samsung (1) SANS (10) SAST (2) SCA (1) SCAP (2) scapy (2) screen (3) script (3) sdiff (1) SDLC (4) SELinux (1) SEM (1) Sentinel (3) servicepack (1) shadon (1) shebang (3) shellcode (1) shellshock (2) SIEM (2) Skype (1) smartphone (1) smb2 (2) smbv1 (1) sniffer (3) software security (2) spoofing (2) Spring (1) SpyOnWeb (1) sqlinjection (5) squid (1) ssh (8) SSL/TLS (13) starwars (1) steganography (1) storage (2) Sucuri (1) sudo (2) SupplyChain (1) syncookies (2) sysadm (16) systemd (2) TCP Timestamp (1) tcp/ip (6) tcpdump (1) Teams (1) telegram (1) telnet (2) Tenable (1) Tenable Nessus (3) threat (1) tiddlywiki (1) tips (48) tmux (1) tools (92) tracking (1) Trustware (1) tshark (1) tun0 (1) tunnel (1) Twitter (3) UAC (1) Ubuntu (18) unifi (1) Unity (1) unix (3) USB (5) utils (7) uTorrent (1) vim (9) virtualization (11) vista (20) visualization (2) vmware (9) VPN (3) vscode (1) vulnerability (9) vulscan (9) W2K (2) W2K3 (2) W2K8 (6) W7 (25) wasm (1) weapon (1) Web 2.0 (2) webapp (7) WebM (1) WebP (1) WebSocket (2) whois (4) wifi (7) win10 (6) win11 (5) Windows (13) winget (1) wireless (2) wireshark (1) wmic (1) worm (1) wpa2 (1) WSL (4) WXP (1) XML (1) XP (7) XSRF (4) XSS (6) YAML (6) YouTube (4) ZeroTrust (4) ZMap (1) zsh (7)

Blogroll

Kali Linux Tutorials

Bad Py — A Simple Bad Tool : A Seemingly Straightforward Tool That Embodies
1 day ago
Windows Command Line

Cascadia Code 2404.23
1 week ago
Hacking Articles

Disk Group Privilege Escalation
1 week ago
{turnoff.us}

don't share a pipe with cut tshirt
2 weeks ago
PacketLife

Book Review: Model-Driven DevOps
10 months ago
TaoSecurity

My Last Email with W. Richard Stevens
10 months ago

Show 5 Show All

Links

github.com/MySeq

Blog Archive

► 2022 (221)
- December (16)
- November (11)
- October (27)
- September (27)
- August (23)
- July (17)
- June (13)
- May (22)
- April (20)
- March (15)
- February (14)
- January (16)

► 2021 (175)
- December (14)
- November (23)
- October (14)
- September (12)
- August (9)
- July (22)
- June (18)
- May (12)
- April (12)
- March (13)
- February (15)
- January (11)

► 2020 (33)
- December (8)
- November (4)
- October (3)
- September (2)
- August (3)
- July (2)
- June (2)
- May (1)
- April (2)
- March (2)
- February (3)
- January (1)

► 2019 (8)
- October (1)
- August (2)
- May (2)
- January (3)

► 2018 (4)
- December (1)
- November (1)
- September (1)
- August (1)

► 2017 (3)
- December (1)
- September (1)
- February (1)

▼ 2016 (3)
- December (1)
- November (1)
- February (1)

► 2015 (9)
- December (1)
- September (1)
- June (1)
- May (3)
- April (2)
- March (1)

► 2014 (37)
- November (1)
- October (1)
- September (1)
- August (2)
- July (4)
- June (4)
- May (8)
- February (4)
- January (12)

► 2013 (18)
- October (1)
- September (4)
- July (5)
- June (6)
- January (2)

► 2012 (28)
- December (1)
- October (5)
- September (6)
- August (2)
- July (2)
- June (2)
- May (9)
- January (1)

► 2011 (96)
- December (3)
- November (9)
- October (5)
- September (2)
- August (3)
- July (10)
- June (12)
- May (15)
- April (9)
- March (6)
- February (7)
- January (15)

► 2010 (95)
- December (26)
- November (16)
- October (7)
- September (11)
- August (9)
- July (13)
- June (5)
- May (2)
- April (1)
- March (3)
- January (2)

► 2009 (92)
- October (9)
- September (11)
- August (3)
- July (17)
- June (13)
- May (6)
- April (22)
- March (6)
- February (5)

► 2008 (107)
- December (2)
- November (10)
- October (9)
- September (24)
- August (18)
- July (23)
- June (9)
- May (4)
- April (1)
- March (2)
- February (3)
- January (2)

► 2007 (25)
- December (3)
- October (1)
- September (1)
- August (1)
- July (1)
- June (4)
- March (2)
- February (10)
- January (2)

► 2006 (16)
- December (5)
- September (1)
- May (9)
- April (1)

► 2004 (2)
- September (2)

Awesome Inc. theme. Powered by Blogger.