MySeq (#SimplifyCybersecurity #EssentialSecurity)

Simplicity is the Ultimate Sophistication

Pages

/home/myseq/blog
/etc/qotd
~/.plan
~/.projects
~/.settings

Nov 11, 2016

BIG-IP-Cookie-decoding

Tags: [PoC], Big-IP

Found a POC that decode cookie values from BIG-IP load balancers >= 10.0.0

Links:

https://github.com/evict/BIG-IP-Cookie-decoding

Email This BlogThis!Share to X Share to Facebook Share to Pinterest

Newer Post Older Post Home

Search MySEQ

Tags

[⚝] (6) [1Kword] (1) [8thgrade] (1) [AI/ML] (3) [Azure] (23) [Backdoor] (5) [cli] (28) [cloud] (21) [crypto] (5) [cti] (7) [cve] (33) [cwe] (2) [Cybersecurity] (14) [DFIR] (2) [DO285] (1) [drone] (1) [EssentialSecurity] (20) [exposure] (3) [FOR610] (1) [GPYC] (1) [GREM] (1) [Human] (1) [ioc] (4) [Kenna] (30) [notes] (1) [pcap] (3) [PoC] (9) [quote] (8) [Rapid7] (2) [recon] (12) [SEC503] (1) [SEC540] (2) [SEC573] (1) [SEC642] (1) [strategy] (9) [training] (13) [ttp] (4) [Vuln] (16) [VulnerabilityScan] (13) [VulnMgmt] (5) [VulnResearch] (6) [webinar] (38) [WFA] (2) 🐍 (53) 0day (32) 1liner (2) 2FA (5) 30seconds (10) 404 (1) activeX (5) adm (1) ADsec (19) AES (1) Agile (3) AHCI (1) airport (2) AJAX (2) Alsid (1) analyzer (2) Android (14) Angry Birds (1) antivirus (2) AOKP (1) apk (5) Apple (1) appscan (4) APT (2) Arduino (1) articles (8) ascii (2) attack (26) audit (7) authentication (5) AWS (1) BH09 (5) Big-IP (1) BIND 9 (1) Bing (2) BIOS (1) BitLocker (1) Bookmarklet (1) books (2) bootkit (1) Bossa Vino (5) breaches (9) browser (4) BSOD (8) bt4 (12) bt5 (3) bug (2) BurpSuitePro (2) chatGPT (2) CISA (11) Cisco (6) cloud computing (5) cloud-init (1) cmdline (78) compiler (2) compliance (5) conference (2) container (8) Counter Intelligence (1) crack (6) crash (1) CSP (1) CSV (1) CVRF (1) CVSS (12) DAST (1) database (2) debugger (2) defaultpassword (2) DEFCON (1) Defender (3) Dell (7) DevMode (1) DevOps (6) DevSecOps (5) discovery (1) distributed computing (1) dns (7) docker (23) DoH (1) Doreamon (1) DoS (9) dotfiles (2) easter egg (10) Edge (3) enumeration (1) EPSS (5) error (14) evasion (3) Excel (5) exploitation (10) Facebook (11) firefox (13) Flash (2) forensic (9) fragattack (1) fun (4) fuzzer (1) G+ (2) game (2) GHA (4) GHDB (1) github (11) GitOps (2) GitSecOps (1) GMail (7) GnackTrack (1) Go (1) Google (29) Google Chrome (21) Google Reader (6) googledorks (1) governance (2) GraphQL (1) GREM (2) GRUB (1) GTalk (3) hacker (9) hacknotes (1) hash (1) helloWorld (3) Hetty (1) hijack (3) history (2) HITB09 (6) Hostmap (1) Hotmail (1) hsbb (1) HSTS (3) HTML5 (7) http (12) IaaS (1) IaC (1) IAM (1) IBM (3) icmp (3) ICS (6) IIS (1) impress.js (1) infosec (27) InfoSec Mag (1) InsightVM (1) Intel (1) Intellectual Property (1) InTheField (1) IoT (3) ip-over-dns (1) ip-over-icmp (1) iPhone (9) ipmi (1) ipv6 (5) IR (5) ism (4) iso27000 (4) issue (2) IT framework (3) Java (7) javascript (7) Jenkins (1) joke (10) JSON (9) Julia (1) K3s (1) K8s (18) K9s (1) Kafka (1) Kali (1) keynote (1) Lab21 (10) Learn101 (7) linux (47) Live.com (1) lpe (1) MAC (1) makeuseof (1) malware (4) marathon (1) MBR (2) md5 (1) metadata (1) metasploit (5) MI5 (1) microk8s (1) microsoft (16) mis-configuration (6) mitm (4) MIUI (2) mobile (2) modsecurity (1) motd (1) msdn (1) msf (3) msie (8) MSN (1) multipass (17) myemail (1) mysql (2) NaCl (1) Network Solutions (1) Nexus S (5) nginx (5) NIST (5) nmap (4) node.js (5) NSA (1) NTFS (4) NTLM (1) nuclei (1) OAuth (2) Octant (1) office (8) Office365 (1) OIDC (1) omi (2) Oneplus1 (1) online (2) OpenAI (3) OpenShift (1) opensource (15) OpenSSF (2) OpenVAS (1) Oracle (2) OS (2) OSINT (2) OVAL (2) OWASP (5) packet generator (1) PacMan (2) Palo_Alto (1) parking meter (1) passwordless (1) patching (4) PatchTuesday (7) PCI DSS (1) pentest (29) perl (1) phishing (2) picasa (1) Portainer (1) PowerBI (1) powershell (9) presentation (2) programming (5) ProjectDiscovery (4) proxy (4) pstools (1) python (68) ransomware (1) RBAC (1) rce (9) reconnaissance (13) RedHat (2) REM (13) REST-API (2) Risk Management (6) robtex (1) rootkit (4) router (3) RPi (19) ruby (1) Rust (1) Samsung (1) SANS (10) SAST (2) SCA (1) SCAP (2) scapy (2) screen (3) script (3) sdiff (1) SDLC (4) SELinux (1) SEM (1) Sentinel (3) servicepack (1) shadon (1) shebang (3) shellcode (1) shellshock (2) SIEM (2) Skype (1) smartphone (1) smb2 (2) smbv1 (1) sniffer (3) software security (2) spoofing (2) Spring (1) SpyOnWeb (1) sqlinjection (5) squid (1) ssh (8) SSL/TLS (13) starwars (1) steganography (1) storage (2) Sucuri (1) sudo (2) SupplyChain (1) syncookies (2) sysadm (16) systemd (2) TCP Timestamp (1) tcp/ip (6) tcpdump (1) Teams (1) telegram (1) telnet (2) Tenable (1) Tenable Nessus (3) threat (1) tiddlywiki (1) tips (48) tmux (1) tools (92) tracking (1) Trustware (1) tshark (1) tun0 (1) tunnel (1) Twitter (3) UAC (1) Ubuntu (18) unifi (1) Unity (1) unix (3) USB (5) utils (7) uTorrent (1) vim (9) virtualization (11) vista (20) visualization (2) vmware (9) VPN (3) vscode (1) vulnerability (9) vulscan (9) W2K (2) W2K3 (2) W2K8 (6) W7 (25) wasm (1) weapon (1) Web 2.0 (2) webapp (7) WebM (1) WebP (1) WebSocket (2) whois (4) wifi (7) win10 (6) win11 (5) Windows (13) winget (1) wireless (2) wireshark (1) wmic (1) worm (1) wpa2 (1) WSL (4) WXP (1) XML (1) XP (7) XSRF (4) XSS (6) YAML (6) YouTube (4) ZeroTrust (4) ZMap (1) zsh (7)

Blogroll

Hacking Articles

Abusing AD-DACL: AllExtendedRights
7 hours ago
Kali Linux Tutorials

Shadow-rs : Harnessing Rust’s Power For Kernel-Level Security Research
1 week ago
Windows Command Line

GitHub Copilot in Windows Terminal
2 weeks ago
TaoSecurity

What Are Normal Users Supposed to Do with IDS Alerts from Network Gear?
4 weeks ago
{turnoff.us}

Blue Screen of Death
3 months ago
PacketLife

Book Review: Model-Driven DevOps
1 year ago

Show 5 Show All

Links

github.com/MySeq

Blog Archive

► 2022 (221)
- December (16)
- November (11)
- October (27)
- September (27)
- August (23)
- July (17)
- June (13)
- May (22)
- April (20)
- March (15)
- February (14)
- January (16)

► 2021 (175)
- December (14)
- November (23)
- October (14)
- September (12)
- August (9)
- July (22)
- June (18)
- May (12)
- April (12)
- March (13)
- February (15)
- January (11)

► 2020 (33)
- December (8)
- November (4)
- October (3)
- September (2)
- August (3)
- July (2)
- June (2)
- May (1)
- April (2)
- March (2)
- February (3)
- January (1)

► 2019 (8)
- October (1)
- August (2)
- May (2)
- January (3)

► 2018 (4)
- December (1)
- November (1)
- September (1)
- August (1)

► 2017 (3)
- December (1)
- September (1)
- February (1)

▼ 2016 (3)
- December (1)
- November (1)
- February (1)

► 2015 (9)
- December (1)
- September (1)
- June (1)
- May (3)
- April (2)
- March (1)

► 2014 (37)
- November (1)
- October (1)
- September (1)
- August (2)
- July (4)
- June (4)
- May (8)
- February (4)
- January (12)

► 2013 (18)
- October (1)
- September (4)
- July (5)
- June (6)
- January (2)

► 2012 (28)
- December (1)
- October (5)
- September (6)
- August (2)
- July (2)
- June (2)
- May (9)
- January (1)

► 2011 (96)
- December (3)
- November (9)
- October (5)
- September (2)
- August (3)
- July (10)
- June (12)
- May (15)
- April (9)
- March (6)
- February (7)
- January (15)

► 2010 (95)
- December (26)
- November (16)
- October (7)
- September (11)
- August (9)
- July (13)
- June (5)
- May (2)
- April (1)
- March (3)
- January (2)

► 2009 (92)
- October (9)
- September (11)
- August (3)
- July (17)
- June (13)
- May (6)
- April (22)
- March (6)
- February (5)

► 2008 (107)
- December (2)
- November (10)
- October (9)
- September (24)
- August (18)
- July (23)
- June (9)
- May (4)
- April (1)
- March (2)
- February (3)
- January (2)

► 2007 (25)
- December (3)
- October (1)
- September (1)
- August (1)
- July (1)
- June (4)
- March (2)
- February (10)
- January (2)

► 2006 (16)
- December (5)
- September (1)
- May (9)
- April (1)

► 2004 (2)
- September (2)

Awesome Inc. theme. Powered by Blogger.