A PoC for stealing unprotected cookies (missing secure attribute) from https sessions