Contents of video -:* Basics of attack
* Definition of session cookies
* Why only yahoo account
* Stealing session cookies
* Using stolen cookies to access yahoo account without credentials
* Demonstration of attack using two different browsers
Requirement -: Download the scripts from here.
Password to access one of the script is 'explore'
* This attack is working today (at time of writing ). The vulnerability might be patched by respective organisations any time.
Note: I have written same article here. Its not a video tutorial. Thanks to Mr.Mohit, admin of
cyberarmy.in for publishing it.