https://github.com/hexedpackets/cookiemonster
A covert channel over HTTP using Google Analytic cookies as the medium.
https://github.com/hexedpackets/cookiemonster
Last synced: 6 months ago
JSON representation
A covert channel over HTTP using Google Analytic cookies as the medium.
- Host: GitHub
- URL: https://github.com/hexedpackets/cookiemonster
- Owner: hexedpackets
- License: mit
- Created: 2013-11-04T20:38:34.000Z (over 12 years ago)
- Default Branch: master
- Last Pushed: 2013-11-04T20:49:16.000Z (over 12 years ago)
- Last Synced: 2025-01-30T21:53:16.127Z (over 1 year ago)
- Language: Python
- Size: 113 KB
- Stars: 2
- Watchers: 1
- Forks: 3
- Open Issues: 0
-
Metadata Files:
- Readme: README.md
- License: LICENSE
Awesome Lists containing this project
README
cookiemonster
=============
A covert channel over HTTP using Google Analytic cookies as the medium. This provides a bidirectional channel of 33 characters/ssecond in each direction.
## Notes on specific cookies and examples
### __utmb
* 10^22 - really 10^14
* expires after 30 minutes
* timestamp of when user enters site
* 87498951.2.10.1301411309
* .2. increases by 2 every reload
* expiration also updates
### __utmc
* 10^8
* session cookie
* timestamp of when user leaves site
* matches first 8 of all other cookies
* 87498951
### __utma
* persistant
* number of times user has visited site, first visit, and last visit
* 87498951.916881531.1301411309.1301411309.1301411309.1
* 8.9.10.10.10.1
* 10^49
### __utmz
* 6 month expiration
* allows customized length
* where user came from, browser, link clicked, etc.
* 87498951.1301411309.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none)
* 10^14
### __utmv
* persistant
* custom segmentation for website