Getting All Cookies From A Website Using Developer Console

Raunit Verma - in Others
Views: 26

Learn to retrieve all cookies from a website effortlessly with the Developer Console. Follow our comprehensive guide for clear, actionable steps and tips.
const cookies = document.cookie.split("; ").reduce((acc, cookie) => {
    const [name, ...value] = cookie.split("=");
    acc[name] = value.join("=");
    return acc;
}, {});

// Convert to JSON string
const cookieJSON = JSON.stringify(cookies);
console.log(cookieJSON)
Sample Output:
{
  "PREF": "f4=4000000&f6=daad&tz=Asia.Calcut=true&volume=30",
  "APISID": "qDkiEKVTRMTSek/A9pdlnZgPBB-0E1JY",
  "SAPISID": "wmOsZzkpv9Wiv_T5/APAWMjZDedpMMD",
  "__Secure-1PAPISID": "wmOsZzkpv9Wiv_T5/APAMjZDedpMMD",
  "__Secure-3PAPISID": "wmOsZzkpv9Wiv_T5/APJWMjZDedpMMD",
  "SID": "g.a000rgidyLx---XD9EALDQVZ3Kha_16l76",
  "SIDCC": "-nEaZdwo_LjOstx3_d9h"
}
Code:
const cookies = document.cookie.split("; ").map((cookie) => {
    const [name, ...valueParts] = cookie.split("=");
    const value = valueParts.join("=");

    return {
        name,
        value,
        domain: window.location.hostname, // Default to the current domain
        path: "/", // Default path
        secure: location.protocol === "https:", // Secure if using HTTPS
        httpOnly: false, // Cannot be determined directly in JavaScript
        sameSite: "Lax", // Default SameSite policy
        hostOnly: true, // Assumed as true for simplicity
        expirationDate: null // Requires server-set expiration (optional)
    };
});

const cookieJSON = JSON.stringify(cookies);
console.log(cookieJSON);
Output:
[
  {
    "name": "PREF",
    "value": "f4=4000000&f6autoplay=true&volume=30",
    "domain": "www.youtube.com",
    "path": "/",
    "secure": true,
    "httpOnly": false,
    "sameSite": "Lax",
    "hostOnly": true,
    "expirationDate": null
  },
  {
    "name": "APISID",
    "value": "qDkiEKVTRMTSeklm/-0E1JY",
    "domain": "www.youtube.com",
    "path": "/",
    "secure": true,
    "httpOnly": false,
    "sameSite": "Lax",
    "hostOnly": true,
    "expirationDate": null
  }
]
You can change the other values like domain, path, secure etc by looking at the cookies in the browser console.

Handling HttpOnly Cookies

Cookies with the HttpOnly attribute cannot be accessed using JavaScript. To modify such cookies:

  • Open the Developer Tools and navigate to the Application tab.
  • Under the Storage section, select Cookies and choose the domain for the website.
  • Find the cookie marked with HttpOnly and uncheck the box next to it to disable the attribute temporarily.
  • Refresh the page or make changes as required. Note that this may not work if the server enforces strict HttpOnly rules.
Tagschromecookiesextract cookiescookies to json
Raunit Verma-picture
Raunit Verma

Technical Writer at CodingKaro

Share this on
CodingKaro Poster
CodingKaro
4.7

3K+ Downloads

One of its unique features is an automated coding contest reminder, which sets alarms for upcoming coding contests on popular platforms like CodeChef, CodeForces, and LeetCode, without the need for user input. This feature ensures that users never miss a coding contest and can stay updated with the latest coding challenges.

Download CodingKaro
Other Blogs in Others