Ecosyste.ms: Awesome
An open API service indexing awesome lists of open source software.
https://github.com/noraj/flask-session-cookie-manager
:cookie: Flask Session Cookie Decoder/Encoder
https://github.com/noraj/flask-session-cookie-manager
cookie decoder encoder flask offensive-security pentest tool
Last synced: 5 days ago
JSON representation
:cookie: Flask Session Cookie Decoder/Encoder
- Host: GitHub
- URL: https://github.com/noraj/flask-session-cookie-manager
- Owner: noraj
- License: mit
- Created: 2017-07-16T17:04:55.000Z (over 7 years ago)
- Default Branch: master
- Last Pushed: 2025-01-02T00:42:52.000Z (20 days ago)
- Last Synced: 2025-01-10T03:04:55.626Z (12 days ago)
- Topics: cookie, decoder, encoder, flask, offensive-security, pentest, tool
- Language: Python
- Homepage: https://noraj.github.io/flask-session-cookie-manager/
- Size: 38.1 KB
- Stars: 652
- Watchers: 8
- Forks: 91
- Open Issues: 0
-
Metadata Files:
- Readme: README.md
- Funding: .github/FUNDING.yml
- License: LICENSE
Awesome Lists containing this project
README
# Flask Session Cookie Decoder/Encoder
[](https://github.com/noraj/flask-session-cookie-manager)
[](https://github.com/noraj/flask-session-cookie-manager)
[](https://inventory.raw.pm/tools.html#Flask%20Session%20Cookie%20Decoder/Encoder)
[](https://github.com/noraj/flask-session-cookie-manager/blob/master/LICENSE)
Original author : [**Wilson Sumanang**](https://github.com/saruberoz)
Fixes and improvements author : [**Alexandre ZANNI**](https://github.com/noraj)
Imported from [saruberoz.github.io](http://saruberoz.github.io/flask-session-cookie-decoder-slash-encoder)
## Depencencies
+ Python 2 or Python 3
+ [itsdangerous](https://pypi.python.org/pypi/itsdangerous)
+ [Flask](https://pypi.python.org/pypi/Flask)
## Installation
### Package
[](https://repology.org/project/python:flask-session-cookie-manager/versions)
#### BlackArch Linux
```
# pacman -S flask-session-cookie-manager{3,2}
```
### Git
#### ArchLinux
Both python3 and python2:
```
$ git clone https://github.com/noraj/flask-session-cookie-manager.git && cd flask-session-cookie-manager
# makepkg -sic
```
#### Other distros
Find your way with your package manager, use pip in a virtual environment or use [pyenv](https://github.com/pyenv/pyenv).
Eg.
```
$ git clone https://github.com/noraj/flask-session-cookie-manager.git && cd flask-session-cookie-manager
$ python -m venv venv
$ source venv/bin/activate
$ pip install setuptools
$ python -m pip install .
```
## Usage
Use `flask_session_cookie_manager3.py` with Python 3 and `flask_session_cookie_manager2.py` with Python 2.
```
usage: flask_session_cookie_manager{2,3}.py [-h] {encode,decode} ...
Flask Session Cookie Decoder/Encoder
positional arguments:
{encode,decode} sub-command help
encode encode
decode decode
optional arguments:
-h, --help show this help message and exit
```
### Encode
```
usage: flask_session_cookie_manager{2,3}.py encode [-h] -s -t
optional arguments:
-h, --help show this help message and exit
-s , --secret-key
Secret key
-t , --cookie-structure
Session cookie structure
```
### Decode
```
usage: flask_session_cookie_manager{2,3}.py decode [-h] [-s ] -c
optional arguments:
-h, --help show this help message and exit
-s , --secret-key
Secret key
-c , --cookie-value
Session cookie value
```
## Examples
### Encode
```
$ python{2,3} flask_session_cookie_manager{2,3}.py encode -s '.{y]tR&sp&77RdO~u3@XAh#TalD@Oh~yOF_51H(QV};K|ghT^d' -t '{"number":"326410031505","username":"admin"}'
eyJudW1iZXIiOnsiIGIiOiJNekkyTkRFd01ETXhOVEExIn0sInVzZXJuYW1lIjp7IiBiIjoiWVdSdGFXND0ifX0.DE2iRA.ig5KSlnmsDH4uhDpmsFRPupB5Vw
```
**Note**: the session cookie structure must be a valid python dictionary
### Decode
With secret key:
```
$ python{2,3} flask_session_cookie_manager{2,3}.py decode -c 'eyJudW1iZXIiOnsiIGIiOiJNekkyTkRFd01ETXhOVEExIn0sInVzZXJuYW1lIjp7IiBiIjoiWVdSdGFXND0ifX0.DE2iRA.ig5KSlnmsDH4uhDpmsFRPupB5Vw' -s '.{y]tR&sp&77RdO~u3@XAh#TalD@Oh~yOF_51H(QV};K|ghT^d'
{u'username': 'admin', u'number': '326410031505'}
```
Without secret key (less pretty output):
```
$ python{2,3} flask_session_cookie_manager{2,3}.py decode -c 'eyJudW1iZXIiOnsiIGIiOiJNekkyTkRFd01ETXhOVEExIn0sInVzZXJuYW1lIjp7IiBiIjoiWVdSdGFXND0ifX0.DE2iRA.ig5KSlnmsDH4uhDpmsFRPupB5Vw'
{"number":{" b":"MzI2NDEwMDMxNTA1"},"username":{" b":"YWRtaW4="}}
```