Metasploit Weekly Wrap-Up

Flask Cookies

This week includes two modules related to Flask cookie signatures. One is specific to Apache Superset where session cookies can be resigned, allowing an attacker to elevate their privileges and dump the database connection strings. While adding this functionality, community member h00die also added a module for generically

apache apache superset attacker community cookie cookies database flask metasploit metasploit weekly wrapup modules privileges session signatures strings superset week weekly wrap-up