the-web-application-hackers-handbook

554 Chapter 13 n Attacking Users: Other Techniques
Internet Explorer userData
Internet Explorer implements its own custom local storage mechanism called
userData.
HACK STEPS
You can review the contents of the raw data stored in IE’s userData directly on
disk. For recent versions of Internet Explorer, this data resides within the following
folder structure:
C:\Users\user\AppData\Roaming\Microsoft\Internet Explorer\
UserData\Low\{random}
TRY IT!
http://mdsec.net/auth/232/
HTML5 Local Storage Mechanisms
HTML5 is introducing a range of new local storage mechanisms, including:
n Session storage
n Local storage
n Database storage
The specifications and usage of these mechanisms are still evolving. They are
not fully implemented in all browsers, and details of how to test for their usage
and review any persisted data are likely to be browser-dependent.
Preventing Local Privacy Attacks
Applications should avoid storing anything sensitive in a persistent cookie.
Even if this data is encrypted, it can potentially be resubmitted by an attacker
who captures it.
Applications should use suitable cache directives to prevent sensitive data
from being stored by browsers. In ASP applications, the following instructions
cause the server to include the required directives:
In Java applications, the following commands should achieve the same result: