Files
UltyScan/templates/passive/web/Insecure_Cookie_-_Secure_Not_Set.sh

8 lines
234 B
Bash

AUTHOR='@xer0dayz'
VULN_NAME='Insecure Cookie - Secure Not Set'
FILENAME="$LOOT_DIR/web/headers-htt*-$TARGET-*.txt"
MATCH='Set-Cookie'
SEVERITY='P3 - MEDIUM'
GREP_OPTIONS='-i'
SEARCH='positive'
SECONDARY_COMMANDS=' | egrep -iv secure'