Skip to main content

Cookie_Monster

Cookie_Monster is a Python tool designed to capture and analyze session IDs, cookies, and web tokens from websites. It scans a provided URL to extract these details and performs basic analysis to identify potential vulnerabilities or types of tokens and cookies.

Features

  • Extracts Cookies and Tokens: Retrieves cookies and tokens from HTTP headers and JavaScript embedded in the page.
  • Basic Analysis: Identifies whether extracted cookies or tokens might be session-related or authentication-related.
  • Command-Line Interface: Run the script from the command line with a single URL parameter.

Installation

  1. Ensure you have Python installed on your machine.

  2. Install the required Python packages using the following command:

    pip install -r requirements.txt
    

    Where requirements.txt should include the following:

    base65
    requests==2.28.2
    beautifulsoup4==4.12.2
    

Usage

Run the script from the command line by providing the URL you want to scan. Example usage:

python Cookie_Monster.py http://example.com

This file was created before packaging below is the commands to run as pypi:

pip install Cookie_Monster
'''

cookie-monster


### Arguments

- `<URL>`: The website URL to scan.

## Example Output

Here's an example of what the output might look like:

```plaintext
[*] Scanning website: http://example.com
[*] Cookie: session_id = abc123
Analyzing Cookie: session_id
[!] Cookie may be a session cookie.

[*] Token: auth_token = xyz789
Analyzing Token: auth_token
[!] Token may be an authentication token.

Analysis Details

  • Cookies:

    • If the cookie name contains 'session', it might be a session cookie.
    • If the cookie name contains 'token', it might be a token.
  • Tokens:

    • If the token name contains 'session', it might be a session token.
    • If the token name contains 'auth', it might be an authentication token.

License

This project is licensed under the MIT License. See the LICENSE file for details.

Acknowledgements

Built by DeadmanXXXII.

Metadata

Release files for C00ki3-M0nster 0.1.2

For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.

Source distribution (sdist)

Source distribution for C00ki3-M0nster 0.1.2
File Size Uploaded Provenance Actions
C00ki3_M0nster-0.1.2.tar.gz 290.5 kB Without provenance Details for C00ki3_M0nster-0.1.2.tar.gz

Built distribution (wheel)

Table of built distributions (wheels) for C00ki3-M0nster 0.1.2
File Interpreter ABI Platform Actions
C00ki3_M0nster-0.1.2-py3-none-any.whl Python 3 none any Details for C00ki3_M0nster-0.1.2-py3-none-any.whl

Total release size: 293.7 kB

Release files / C00ki3_M0nster-0.1.2.tar.gz

Download URL C00ki3_M0nster-0.1.2.tar.gz
Size 290.5 kB
Tags Source
SHA-256 checksum
How to use checksums
eb59fd1c8d7c283c8b65593aed5eae8461ee5ddebdf895c6f02a88bad5bce5ef
BLAKE2b-256 checksum
How to use checksums
1f1d648699f1a62768a2a0fc83ee79346cd27abf00fcc966668e9c845a07e9a4
Upload date
Uploaded using Trusted Publishing?
What is trusted publishing?
No
Uploaded via twine/5.1.1 CPython/3.11.9

Release files / C00ki3_M0nster-0.1.2-py3-none-any.whl

Download URL C00ki3_M0nster-0.1.2-py3-none-any.whl
Size 3.3 kB
Tags Python 3
SHA-256 checksum
How to use checksums
60d08c790fe1741d40fe0240310d6084f62cab38aecd788ec89964d658e780c1
BLAKE2b-256 checksum
How to use checksums
61145d832d066b3b2d6cf73a11de67a445f511f98ed1fd9f3a9f00e6bffe3571
Upload date
Uploaded using Trusted Publishing?
What is trusted publishing?
No
Uploaded via twine/5.1.1 CPython/3.11.9

Security for C00ki3-M0nster 0.1.2

Provenance

Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.

No provenance found

None of the files in this release were uploaded with provenance metadata.

A note on package security

PyPI is a repository for distributing packages, not a service for auditing them. While third-party security researchers and our staff do their best to detect and remove malicious packages, PyPI cannot guarantee the quality, security or suitability of any given package.

To learn more about protecting yourself from malicious actors, visit our package security documentation.

Anthropic, PBC Visionary sponsor Bloomberg Visionary sponsor Hudson River Trading Visionary sponsor Meta Visionary sponsor NVIDIA Visionary sponsor Microsoft Sustainability sponsor Depot Continuous Integration AWS Cloud computing and Security Sponsor Datadog Monitoring Fastly CDN Google Download Analytics Sentry Error logging StatusPage Status page