Cookie Forcing: Overwrite SSL-only cookies from a non-SSL session

scarybeastsecurity.blogspot.com