Scan any website for HTTP cookies, Flash, HTML5 localStorage, sessionStorage, CANVAS, supercookies, evercookies as well as SSL/TLS and HTTP security

Ruby on Rails 3 is using a CookieStore feature for session management which can result in various vulnerabilities, as described here and here. While it's not guaranteed that these websites are vulnerable or even use Ruby, the cookie name pattern resembles the one used by CookieStore.

Selected (out of total) websites using Ruby CookieStore feature
Website Cookie name
currentargus.com _kicktag_session
hvg.hu _goa3session
hvg.hu _goa3session
magyarhirlap.hu _goa3session
index.hu _goa3session
www.teol.hu _goa3session
www.origo.hu _goa3session
www.teol.hu _goa3session
www.origo.hu _goa3session
www.sonline.hu _goa3session
www.origo.hu _goa3session
mno.hu _goa3session
www.sonline.hu _goa3session
www.origo.hu _goa3session
mno.hu _goa3session
index.hu _goa3session
index.hu _goa3session
tdn.com _editorials_session
www.israelhayom.co.il _vicomi_session
letsplaysoccer.com _letsplay_session
cuamckuykot.ru _wp_session
thezeitgeistmovement.com _tzm_session
deadrabbitnyc.com _wp_session
deadrabbitnyc.com _wp_session
zooppa.it _zooppa_session
crescenttours.com _halalbooking_session
kingandpartners.com _kp_session
yag-gallery.de _ohloh_session
sharensearch.com _sns_dev_session
sharensearch.com _sns_dev_session
poetic.io _poetic_session
alt12.com _alt12_session
pushkininstitute.ru _obruset_1_session
unlocklucidity.com _kajabi_session
pbi.org.pl _pbi_session
wkp.io _internal_api_server_session
twincities.com _parsely_session
www.nydailynews.com _parsely_session
ranktrackr.net _ExitMist_session
wildy.co.uk _wildy_com_session
myslimquick.com _shopify_widgets_session
jonlajoie.com _nbuild_session
jonlajoie.com _nbuild_session
themeforest.net _fd_session
nalleybmw.com _sdsession
www.dt.se _sparrow_session
zvrs.com _Website_session
themeforest.net _fd_session
index.hu _goa3session
index.hu _goa3session
lejane.com _marketplace_session
www.reuters.com _parsely_session
bmteam.ru _oms_session
bmteam.ru _oms_browser_session
www.telegraph.co.uk _parsely_session
piquenewsmagazine.com _editorials_session
piquenewsmagazine.com _flyers_session
learnjavaonline.org _skillfeed_session
pulsd.com _pulsd_session
paperspace.io _TiltOpen_session
voicendata.com _Kreatio_session
pazienti.it _pazienti2_session
ecornell.com _wp_session
personalitytype.com _ptapp_session
titans.co.za _crichq_session
investmentweek.co.uk _kreatio_session
ribbon.co _rbn_session
jakobowensproductions.bigcartel.com _big_cartel_session
hackmegame.com _fd_session
fiatchrysler.com.au _FiatChryslerCorporate_session
www.reuters.com _parsely_session
www.quasargaming.com _zendesk_shared_session
manthroughclothes.blogspot.it _lookbook_session
www.nydailynews.com _parsely_session
classicfirearms.com _app_session
news247.gr _parsely_session
www.providencejournal.com _parsely_session
caringbridge.org _awesmsession
www.10news.com _flyers_session
www.reuters.com _parsely_session
klip.bg _svejo_session
www.atv.hu _goa3session
www.atv.hu _goa3session
www.hir24.hu _goa3session
www.origo.hu _goa3session
www.origo.hu _goa3session
www.telegraph.co.uk _parsely_session
collectionofhours.blogspot.com _lookbook_session
houndci.com _houndapp_session
campstaff.com _campstaff_1_session
mashable.com _parsely_session
thestir.cafemom.com _parsely_session
goodsearch.com _good_rails_session
qiita.com _qiita_login_session
socialcam.com _socialcam_session
lift.do _cm_session
diyarmirza.ir _wp_session
apprentus.be _apprentus_session
stankodrom.ru _stdrom_session
cs-sklad.ru _www_session