https://github.com/ldionmarcil/burp-samesite-reporter

Burp extension that passively reports various SameSite flags
https://github.com/ldionmarcil/burp-samesite-reporter

appsec burp-extensions security-automation security-tools

Last synced: about 1 month ago
JSON representation

Burp extension that passively reports various SameSite flags

• Host: GitHub
• URL: https://github.com/ldionmarcil/burp-samesite-reporter
• Owner: ldionmarcil
• License: mit
• Created: 2020-06-01T00:31:30.000Z (over 4 years ago)
• Default Branch: master
• Last Pushed: 2020-06-01T17:16:12.000Z (over 4 years ago)
• Last Synced: 2024-08-02T00:23:03.683Z (4 months ago)
• Topics: appsec, burp-extensions, security-automation, security-tools
• Language: Java
• Size: 485 KB
• Stars: 7
• Watchers: 5
• Forks: 7
• Open Issues: 2
• Metadata Files:
  • Readme: README.md
  • License: LICENSE

Awesome Lists containing this project

• awesome-burp-extensions - burp-samesite-reporter - Burp extension that passively reports various SameSite flags. (Vulnerability Specific Extensions / Cross-Site Request Forgery)
• awesome-hacking-lists - ldionmarcil/burp-samesite-reporter - Burp extension that passively reports various SameSite flags (Java)

README

        
# burp-samesite-reporter

Burp extension that passively reports various SameSite flags.

You can download a build from this repository by downloading [SameSiteReporter.jar](SameSiteReporter.jar).

This extension reports cases where the `SameSite` cookie flag is explicitly set to `None` and when it is missing. Handy for developers who want to write secure code and testers who, like me, often forget to check the `SameSite` value of important cookies.

### SameSite=None

![Samesite None Issue](img/none_samesite_issue.png)

![Samesite None Response](img/none_samesite_response.png)

### SameSite Missing

![Samesite Missing Issue](img/missing_samesite_issue.png)

![Samesite Missing Response](img/missing_samesite_response.png)