Solved

Get cookie from browser from IIS

Posted on 2011-03-04
8
318 Views
Last Modified: 2012-06-27
I'm trying to get a cookie that is from another domain. The cookie is on the users browser and I was told that I could query the cookie through IIS... Is that true?
0
Comment
Question by:cobolinx1
  • 4
8 Comments
 
LVL 12

Accepted Solution

by:
Cyber-spy earned 500 total points
ID: 35040751
No, this is not possible - think of all the ways security could be breached if you could read cookies from other domains!

As cookies are stored in the browser, the web server makes little difference.

There are several ways of communicating with other domains though.

The simplest is to download an image from the other domain

So, on a web page from www.this.com, you could have something like this:

<img src="http://www.that.net/transfer.aspx?key1=value1&key2=value2" style="width:1px; height:1px" />

Open in new window


transfer.aspx can process whatever data is sent. When it returns an image (make it a 1x1 transparent gif, or even nothing at all - an image with no data and a '200 OK' HTTP response doesn't (in my experience) show a broken image on the page), attach cookies to the image (all files - html, aspx, images, javascript etc can come with cookies).

When you visit http://www.that.net/, your cookie should be there. This is basically the technique used by advertisers to track your movements across the web.

Don't rely too heavily on this though - there are lots of ways of blocking 'third-party' cookies (for the reason mentioned above) so it may not work in every browser.
0
 
LVL 12

Expert Comment

by:Cyber-spy
ID: 35113607
Hi,

Was this information useful?

Regards

Adam
0
 

Author Comment

by:cobolinx1
ID: 35140632
It was but I don't think my security group will allow that plus I need to make sure it'll work in mozilla and ie... neat trick though..I'll give you some points when I can figure this out.
0
How your wiki can always stay up-to-date

Quip doubles as a “living” wiki and a project management tool that evolves with your organization. As you finish projects in Quip, the work remains, easily accessible to all team members, new and old.
- Increase transparency
- Onboard new hires faster
- Access from mobile/offline

 
LVL 12

Expert Comment

by:Cyber-spy
ID: 35143451
OK - let me know how it works out.
0
 
LVL 12

Expert Comment

by:Cyber-spy
ID: 35887085
I answered the question - and the author acknowledged it was useful.
I think I should get the points
0
 
LVL 19

Expert Comment

by:Amandeep Singh Bhullar
ID: 35944470
This question has been classified as abandoned and is closed as part of the Cleanup Program. See the recommendation for more details.
0

Featured Post

Comprehensive Backup Solutions for Microsoft

Acronis protects the complete Microsoft technology stack: Windows Server, Windows PC, laptop and Surface data; Microsoft business applications; Microsoft Hyper-V; Azure VMs; Microsoft Windows Server 2016; Microsoft Exchange 2016 and SQL Server 2016.

Join & Write a Comment

I recently went through the process of creating a Calendar Control of events with the basis of using a database to keep track of the dates that are selectable, one requirement was to have the selected date pop-up in a simple lightbox.  At first this…
In .NET 2.0, Microsoft introduced the Web Site.  This was the default way to create a web Project in Visual Studio 2005.  In Visual Studio 2008, the Web Application has been restored as the default web Project in Visual Studio/.NET 3.x The Web Si…
This demo shows you how to set up the containerized NetScaler CPX with NetScaler Management and Analytics System in a non-routable Mesos/Marathon environment for use with Micro-Services applications.
When you create an app prototype with Adobe XD, you can insert system screens -- sharing or Control Center, for example -- with just a few clicks. This video shows you how. You can take the full course on Experts Exchange at http://bit.ly/XDcourse.

758 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

22 Experts available now in Live!

Get 1:1 Help Now