CodeIgniter-session-unsign

KO | EN

gitlite — search

#react #ai #llm #golang #android #nodejs #awesome #kubernetes #vue #awesome-list #pytorch #security #mcp #ios

CodeIgniter-session-unsign

(★ 16)

Command line tool to fetch, decode and brute-force CodeIgniter session cookies by guessing and bruteforcing secret keys.

CodeIgniter-session-unsign 최신버젼 다운로드

최종 버전 다운로드 (.zip)

// repository documentation

Was this content helpful?

★ 0 (0 ratings)

![](https://raw.githubusercontent.com/p0dalirius/CodeIgniter-session-unsign/main/.github/banner.png)

<p align="center">
  A multithreaded bruteforcer of CodeIgniter ci_session cookies.
  <br>
  <img alt="GitHub release (latest by date)" src="https://img.shields.io/github/v/release/p0dalirius/CodeIgniter-session-unsign">
  <a href="https://twitter.com/intent/follow?screen_name=podalirius_" title="Follow"><img src="https://img.shields.io/twitter/follow/podalirius_?label=Podalirius&style=social"></a>
  <a href="https://www.youtube.com/c/Podalirius_?sub_confirmation=1" title="Subscribe"><img alt="YouTube Channel Subscribers" src="https://img.shields.io/youtube/channel/subscribers/UCF_x5O7CSfr82AfNVTKOv_A?style=social"></a>
  <br>
</p>

## Features

- [x] Extract the `ci_session` cookie from an URL (with `--url`) or from a file (with `--cookie`)
 - [x] Progress updated every second with the number of processed hashes per second.
 - [x] Multithreaded bruteforce.

## Usage

```
$ ./CodeIgniter-session-unsign.py -h
CodeIgniter-session-unsign v1.1 - by Remi GASCOU (Podalirius)

usage: CodeIgniter-session-unsign.py [-h] [-u URL | -c COOKIE] -w WORDLIST [-t THREADS] [-k] [--md5 MD5 | --sha1 SHA1 | --sha256 SHA256]

Description message

optional arguments:
  -h, --help            show this help message and exit
  -u URL, --url URL     URL of the CodeIgniter website.
  -c COOKIE, --cookie COOKIE
                        CodeIgniter session cookie.
  -w WORDLIST, --wordlist WORDLIST
                        Wordlist of keys to test.
  -t THREADS, --threads THREADS
                        Number of threads (default: 8)
  -k, --insecure        Allow insecure server connections when using SSL (default: False)
  --md5 MD5             Use MD5 algorithm.
  --sha1 SHA1           Use SHA1 algorithm.
  --sha256 SHA256       Use SHA256 algorithm.
```

## Example

```
./CodeIgniter-session-unsign.py -c ./example/cookie -w ./example/wordlist
```

![](https://raw.githubusercontent.com/p0dalirius/CodeIgniter-session-unsign/main/.github/example.png)

## Contributing

Pull requests are welcome. Feel free to open an issue if you want to add other features.

## References
 - https://www.websec.ca/publication/blog/insecure-session-data-CodeIgniter

CodeIgniter-session-unsign

CodeIgniter-session-unsign 최신버젼 다운로드

오늘의 추천 프로젝트

Was this content helpful?

Recent Feedback

CodeIgniter-session-unsign

CodeIgniter-session-unsign 최신버젼 다운로드

오늘의 추천 프로젝트

Was this content helpful?

Recent Feedback

Download README