> For the complete documentation index, see [llms.txt](https://gitbook.cdxiaodong.life/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://gitbook.cdxiaodong.life/web-ying-yong-an-quan/cookie-security/cookie-bomb.md).

# Cookie炸弹

Cookie炸弹旨在为用户及其子域添加大量大的cookie。结果，用户将向服务器发送非常大的请求（由于大的cookie），服务器将拒绝这些请求。因此，这将导致这些域和子域的客户端DoS。

## 参考资料

* [HackTricks: Cookie Bomb](https://book.hacktricks.xyz/pentesting-web/hacking-with-cookies/cookie-bomb)
* [Report: DOM based cookie bomb](https://hackerone.com/reports/57356)
* [Slides: The Cookie Monster in Your Browsers - Cookie Bomb](https://speakerdeck.com/filedescriptor/the-cookie-monster-in-your-browsers?slide=26)