Apr 19, 2022
Hey, it was a token not a cookie. It was stored in localStorage and was working as “Authorization Bearer” so no HTTPOnly and no Secure flags.
Written by Jerry Shah (Jerry)
|Penetration Tester| |Hack The Box| |Digital Forensics| |Malware Analysis|