Martijn van Schie

I am working on new project where i am introducing the WiX Toolkit as part of our automated build process using TFSBuild. As the project evolves I am publishing my findings on this blog. The Yet Another WiX Tutorial consists of the following parts: Yet Another WiX Tutorial Part 1 : An Introduction Yet Another WiX Tutorial Part 2: Your First Installer Yet another WiX Tutorial Part 3: Customizing the UI dialogs More to come … Enjoy.

Introduction In order to store use specific information during a ASP.Net session you have to option to place state data in a browser cookie . These cookie are send in plain text and using various tool it is possible to read the content of these cookies. Although reading might not always be a problem, the ability to change the content of a cookie is a big thread. Tampering with the cookie is actually very easy, and i will demonstrate this using a Firefox extension called TamperData . Tampering a Cookie Setup I started by creating a small ASP.NET application that checks the presence of our cookie. If not sets, a cookie is create and filled in the page load. After that i print the values on the page. 1: protected void Page_Load( object sender, EventArgs e) 2: { 3: if (Request.Cookies[" __IGUZA.NET "] == null ) 4: { 5: HttpCookie cookie = new HttpCookie(" __IGUZA.NET "); 6: cookie[" SomeKey "] = " Some