Top 10 winner

Evercookie

Samy Kamkar · sa.my

Evercookie stores one identifier redundantly across every browser persistence mechanism at once, from HTTP cookies and Flash LSOs to RGB values in force-cached PNGs read back through a canvas, visited-link history, ETags and each HTML5 store.

Record

Researcher

Samy Kamkar

Published by

sa.my

In the archive

• Ranked #2 in the 2010 Top 10 Web Hacking Techniques

Related sources

• Research source
• Node.js implementation
• Django implementation

Tags

• cookie
• javascript
• tooling
• flash
• java
• info-leak
• side-channel
• cache
• owasp-a07-2021

This page is the archive's own catalogue record. The research is the work of Samy Kamkar, first published at the original source. Preserved copies are kept so the citation survives its host.