Website Search

Enter a target to scan for cookies.

Input Enter a specific URL or IP address for investigation.

Operation We'll dispatch a request to the designated target and analyze the returned response headers.

Result You'll be presented with a list of cookies that the target uses.

API Overview | 1,000 free daily requests

Make a HTTP POST request (content-type application/json) to https://srcport.com/api/free/[module]

POST

Add a Authorization: Bearer [token] header to the request including your personal API token viewable in your account profile.

Header

The HTTP POST request payload should contain a JSON formatted prompt and options field. The prompt field is typically the target of the scan, e.g., 'example.com'. The buttons below can be used to view the available options.

The prompt is the main searchterm provided to the tool. This needs to be in a format required by the tool otherwise an error may be returned. For example some tools may require URLs while others may require IP addresses.

Some options may be required while others are optional. If there are no options, an empty object should be provided.

The default API key is provided as an example only. This will not work in your own applications. Register for a free account to get an API key.

Example CURL Request

Cookie Entropy

The cookie entropy analyser calculates the entropy of the cookies set by a web application. Entropy is a measure of the randomness of the data. The higher the entropy, the more difficult it is to predict the next value. This is important for session cookies as they should be difficult to guess. If the entropy is low, it may be possible to guess the next value and hijack the session.

Number Comparisons - Choose how many times to scan the URL.

5 10 25 50 100

Moderate Risk Cookie Entropy

Entropy

Entropy is a measure of the randomness of the data. The higher the entropy, the more difficult it is to predict the next value. This is important for session cookies as they should be difficult to guess. If the entropy is low, it may be possible to guess the next value and hijack the session.

Levenshtein

Levenshtein distance, also known as edit distance, is a measure of the difference between two sequences, most commonly strings of characters. It represents the minimum number of single-character edits required to change one word into the other. The allowed edits are: Insertion of a single character. Deletion of a single character.Substitution of a single character for another. The distance value displayed on this page shows the edits required between each cookie value.