Cookie_Monster
Cookie_Monster is a Python tool designed to capture and analyze session IDs, cookies, and web tokens from websites. It scans a provided URL to extract these details and performs basic analysis to identify potential vulnerabilities or types of tokens and cookies.
Features
- Extracts Cookies and Tokens: Retrieves cookies and tokens from HTTP headers and JavaScript embedded in the page.
- Basic Analysis: Identifies whether extracted cookies or tokens might be session-related or authentication-related.
- Command-Line Interface: Run the script from the command line with a single URL parameter.
Installation
-
Ensure you have Python installed on your machine.
-
Install the required Python packages using the following command:
pip install -r requirements.txt
Where
requirements.txtshould include the following:base65 requests==2.28.2 beautifulsoup4==4.12.2
Usage
Run the script from the command line by providing the URL you want to scan. Example usage:
python Cookie_Monster.py http://example.com
This file was created before packaging below is the commands to run as pypi:
pip install Cookie_Monster
'''
cookie-monster
### Arguments
- `<URL>`: The website URL to scan.
## Example Output
Here's an example of what the output might look like:
```plaintext
[*] Scanning website: http://example.com
[*] Cookie: session_id = abc123
Analyzing Cookie: session_id
[!] Cookie may be a session cookie.
[*] Token: auth_token = xyz789
Analyzing Token: auth_token
[!] Token may be an authentication token.
Analysis Details
-
Cookies:
- If the cookie name contains 'session', it might be a session cookie.
- If the cookie name contains 'token', it might be a token.
-
Tokens:
- If the token name contains 'session', it might be a session token.
- If the token name contains 'auth', it might be an authentication token.
License
This project is licensed under the MIT License. See the LICENSE file for details.
Acknowledgements
Built by DeadmanXXXII.
Metadata
Release files for C00ki3-M0nster 0.1.2
For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.
Source distribution (sdist)
| File | Size | Uploaded | Provenance | Actions |
|---|---|---|---|---|
| C00ki3_M0nster-0.1.2.tar.gz | 290.5 kB | Without provenance | Details for C00ki3_M0nster-0.1.2.tar.gz |
Built distribution (wheel)
| File | Interpreter | ABI | Platform | Actions Reset |
|---|---|---|---|---|
| C00ki3_M0nster-0.1.2-py3-none-any.whl | Python 3 | none | any | Details for C00ki3_M0nster-0.1.2-py3-none-any.whl |
Total release size: 293.7 kB
Release files / C00ki3_M0nster-0.1.2.tar.gz
| Download URL | C00ki3_M0nster-0.1.2.tar.gz |
|---|---|
| Size | 290.5 kB |
| Tags | Source |
|
SHA-256 checksum How to use checksums |
eb59fd1c8d7c283c8b65593aed5eae8461ee5ddebdf895c6f02a88bad5bce5ef
|
|
BLAKE2b-256 checksum How to use checksums |
1f1d648699f1a62768a2a0fc83ee79346cd27abf00fcc966668e9c845a07e9a4
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
No |
| Uploaded via |
twine/5.1.1 CPython/3.11.9
|
Release files / C00ki3_M0nster-0.1.2-py3-none-any.whl
| Download URL | C00ki3_M0nster-0.1.2-py3-none-any.whl |
|---|---|
| Size | 3.3 kB |
| Tags | Python 3 |
|
SHA-256 checksum How to use checksums |
60d08c790fe1741d40fe0240310d6084f62cab38aecd788ec89964d658e780c1
|
|
BLAKE2b-256 checksum How to use checksums |
61145d832d066b3b2d6cf73a11de67a445f511f98ed1fd9f3a9f00e6bffe3571
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
No |
| Uploaded via |
twine/5.1.1 CPython/3.11.9
|
Security for C00ki3-M0nster 0.1.2
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
No provenance found
None of the files in this release were uploaded with provenance metadata.
A note on package security
PyPI is a repository for distributing packages, not a service for auditing them. While third-party security researchers and our staff do their best to detect and remove malicious packages, PyPI cannot guarantee the quality, security or suitability of any given package.
To learn more about protecting yourself from malicious actors, visit our package security documentation.