Burp Suite

Decoder and Comparer

Chapter 7 of 7 · Burp Suite 100%
Hands-on Lab

Hack the Cookie: Cookie Poisoning Attack

Practice what you learn in this chapter! This dedicated lab gives you a real vulnerable server to legally exploit using the exact techniques from this chapter.

Very Easy 50 XP 1 flag 62% success
Skills You'll Practice:
Cookie PoisoningSession TamperingBase64 EncodingPrivilege EscalationBrowser DevToolsClient-Side SecurityWeb Exploitation
Pro Lab
Create Free Account

🧩 That random looking cookie often says admin=false

Encoding is not encryption, and plenty of apps still ship state the user can rewrite. Decode a token in three clicks, read what it really holds, then diff two responses to see exactly which byte gave the secret away. 🔎

Premium Chapter

Create a free account to access this chapter and start learning with hands-on labs.

Create Free Account

Join 33,000+ cybersecurity learners

Ready to track your progress?

Create a free account to save your progress, earn XP, and access 170+ hands-on cybersecurity labs.

Start Learning Free

Course Progress

Track your learning journey

0 /7
0 % Complete
7 Remaining
Course Chapters

No chapters found for this filter

8
Sessions, cookies and tokens
Soon Available Oct 20, 2026
9
Extensions and the BApp Store
Soon Available Oct 21, 2026
10
A complete Burp workflow
Soon Available Oct 22, 2026
33,000+ Hackers Real labs Free
Start Hacking Free or solve today's hack, no account needed