Sha256: ab8ac04c80384a71db816f14a979b5f3d379fb8255f63cda51162e94b74784ec

Contents?: true

Size: 1.04 KB

Versions: 7

Compression:

Stored size: 1.04 KB

Contents

require 'sinatra/base'
require 'webrick'
require 'webrick/https'
require 'openssl'

options = {
    Port:            ARGV[1].to_i,
    Host:            ARGV.last,
    SSLEnable:       true,
    SSLVerifyClient: OpenSSL::SSL::VERIFY_NONE,
    SSLCertName:     [["CN", WEBrick::Utils::getservername]],
}

class InsecureCookiesSServer < Sinatra::Base

    get '/' do
        response.set_cookie( "cookie", {
            value:  "value",
            secure: false
        })
        response.set_cookie( "cookie2", {
            value:  "value2",
            secure: false
        })
        response.set_cookie( "cookie3", {
            value:  "value3",
            secure: true
        })
        response.set_cookie( "cookie4", {
            value:  "value4",
            secure: true
        })

        <<EOHTML
<html>
<script>
    document.cookie = "jscookie=blah";
    document.cookie = "jscookie2=blah;secure";
</script>
</html>
EOHTML
    end

end

server = ::Rack::Handler::WEBrick
trap( :INT ) { server.shutdown }

server.run( InsecureCookiesSServer, options )

Version data entries

7 entries across 7 versions & 1 rubygems

Version Path
arachni-1.6.1.3 spec/support/servers/checks/passive/grep/insecure_cookies_https.rb
arachni-1.6.1.2 spec/support/servers/checks/passive/grep/insecure_cookies_https.rb
arachni-1.6.1.1 spec/support/servers/checks/passive/grep/insecure_cookies_https.rb
arachni-1.6.1 spec/support/servers/checks/passive/grep/insecure_cookies_https.rb
arachni-1.6.0 spec/support/servers/checks/passive/grep/insecure_cookies_https.rb
arachni-1.5.1 spec/support/servers/checks/passive/grep/insecure_cookies_https.rb
arachni-1.5 spec/support/servers/checks/passive/grep/insecure_cookies_https.rb