cooltechtools

Session Cookie Analyzer

Paste a raw Set-Cookie header. Get flagged for missing HttpOnly, Secure, SameSite, and warned about predictable session IDs.

Free

Raw Set-Cookie header

Findings

Paste a Set-Cookie header to audit its flags.

Related tools

JWT Attack Simulator

Test tokens against common JWT attack vectors.

CORS Misconfiguration Tester

Probe a target for permissive CORS policies.

OAuth / OIDC Flow Debugger

Flag misconfigurations in OAuth flows.