1. Why phpinfo
2. Stealing
ci_session with info.php file3. PoC
Research:
https://aleksikistauri.medium.com/bypassing-httponly-with-phpinfo-file-4e5a8b17129b
#web #httponly #phpinfo #xss
AP APT @apt_notes · 16.8K subscribers 
ci_session with info.php file