The Cookie Caper
Someone is stealing cookies on the network. Can you identify every type
of cookie and catch the thief?
Level 1: Cookie Collection
Click each cookie to examine it and learn what it does. Collect all 8 to proceed.
Level 2: Find the Cookie Thief
One of these scenarios describes a cookie hijacking attack. Read each case carefully and select the culprit.
Defense Tips: Protect Your Cookies
- View cookies in Chrome: DevTools (F12) → Application tab → Cookies in left sidebar
- Delete specific cookies: Right-click any cookie in DevTools → Delete, or click the clear icon
- Block third-party cookies: Chrome Settings → Privacy → Third-party cookies → Block
- Use HTTPS only: Install "HTTPS Everywhere" or enable Chrome's "Always use secure connections"
- Clear tracking cookies regularly: Settings → Privacy → Clear browsing data → Cookies
- Use private browsing: Incognito mode auto-deletes cookies when you close the window
- Check cookie flags: Secure, HttpOnly, and SameSite flags protect against theft and CSRF