CookieGuardAudit

CookieGuardAudit is a simple Python command-line security tool that checks a website's cookies for common security flag issues.

It helps users quickly spot weak cookie settings such as:

• Missing Secure flag
• Missing HttpOnly flag
• Missing SameSite attribute
• SameSite=None without Secure
• Session cookies that may need review

This project is designed for beginners, defenders, students, and anyone learning basic web security auditing.

Features

• Checks cookies returned by a website
• Reports whether Secure, HttpOnly, and SameSite are present
• Flags risky cookie settings in clear beginner-friendly language
• Simple Python code for learning and authorized testing

Requirements

• Python 3.8 or newer
• requests library

Quick Start

1. Download and extract the project files
2. Open Command Prompt or Terminal in the project folder
3. Install the dependency:

pip install -r requirements.txt

1. Run the tool:

python cookie_guard_audit.py example.com

You can also use a full URL:

python cookie_guard_audit.py https://example.com

If you need to test a site with SSL certificate issues:

python cookie_guard_audit.py https://example.com --insecure

Example Output

=== Cookie Security Audit Results ===
Final URL: https://example.com/
HTTP Status: 200

Cookies Found: 1
--------------------------------------------------------------------------------
Cookie Name : sessionid
Secure      : No
HttpOnly    : Yes
SameSite    : Missing
Expires     : Session cookie
Issues      :

  - Missing Secure flag on an HTTPS site.
  - Missing SameSite attribute.
--------------------------------------------------------------------------------
Cookies with findings: 1 of 1

Files

• cookie_guard_audit.py - main Python script
• requirements.txt - Python dependency list
• README.md - project documentation
• LICENSE - project license

License

MIT License

Disclaimer

This tool is intended for educational, defensive, and authorized testing purposes only. Only test websites you own or have permission to assess.