This exploit is da bomb: Exploiting cookie bombing for session hijacking!