diff --git a/config_tests/CONF_059_TARGET_REQUEST_COOKIES.yaml b/config_tests/CONF_059_TARGET_REQUEST_COOKIES.yaml
new file mode 100644
index 0000000..ef284c1
--- /dev/null
+++ b/config_tests/CONF_059_TARGET_REQUEST_COOKIES.yaml
@@ -0,0 +1,76 @@
+target: REQUEST_COOKIES
+rulefile: MRTS_059_REQUEST_COOKIES.conf
+testfile: MRTS_059_REQUEST_COOKIES.yaml
+templates:
+  - SecRule for TARGETS
+colkey:
+  - - ''
+  - - cookie1
+  - - cookie1
+    - cookie2
+  - - /^cookie_.*$/
+operator:
+  - '@contains'
+oparg:
+  - attack
+phase:
+  - 1
+  - 2
+  - 3
+  - 4
+testdata:
+  phase_methods:
+    1: get
+    2: post
+    3: post
+    4: post
+  targets:
+    - target: ''
+      test:
+        data: null
+        input:
+          headers:
+            - name: Cookie
+              value: foo=attack
+    - target: cookie1
+      test:
+        data: null
+        input:
+          headers:
+            - name: Cookie
+              value: cookie1=attack
+    - target: cookie1
+      test:
+        data: null
+        input:
+          headers:
+            - name: Cookie
+              value: cookie1=attack;cookie2=hello
+    - target: cookie2
+      test:
+        data: null
+        input:
+          headers:
+            - name: Cookie
+              value: cookie2=attack
+    - target: cookie2
+      test:
+        data: null
+        input:
+          headers:
+            - name: Cookie
+              value: cookie1=hello;cookie2=attack
+    - target: /^cookie_.*$/
+      test:
+        data: null
+        input:
+          headers:
+            - name: Cookie
+              value: cookie_foo=attack
+    - target: /^cookie_.*$/
+      test:
+        data: null
+        input:
+          headers:
+            - name: Cookie
+              value: cookie_bar=hello;cookie_foo=attack;cookie_foobar=world
diff --git a/generated/rules/MRTS_059_REQUEST_COOKIES.conf b/generated/rules/MRTS_059_REQUEST_COOKIES.conf
new file mode 100644
index 0000000..4f132b0
--- /dev/null
+++ b/generated/rules/MRTS_059_REQUEST_COOKIES.conf
@@ -0,0 +1,144 @@
+SecRule REQUEST_COOKIES "@contains attack" \
+    "id:100116,\
+    phase:1,\
+    deny,\
+    t:none,\
+    log,\
+    msg:'%{MATCHED_VAR_NAME} was caught in phase:1',\
+    ver:'MRTS/0.1'"
+
+SecRule REQUEST_COOKIES "@contains attack" \
+    "id:100117,\
+    phase:2,\
+    deny,\
+    t:none,\
+    log,\
+    msg:'%{MATCHED_VAR_NAME} was caught in phase:2',\
+    ver:'MRTS/0.1'"
+
+SecRule REQUEST_COOKIES "@contains attack" \
+    "id:100118,\
+    phase:3,\
+    deny,\
+    t:none,\
+    log,\
+    msg:'%{MATCHED_VAR_NAME} was caught in phase:3',\
+    ver:'MRTS/0.1'"
+
+SecRule REQUEST_COOKIES "@contains attack" \
+    "id:100119,\
+    phase:4,\
+    deny,\
+    t:none,\
+    log,\
+    msg:'%{MATCHED_VAR_NAME} was caught in phase:4',\
+    ver:'MRTS/0.1'"
+
+SecRule REQUEST_COOKIES:cookie1 "@contains attack" \
+    "id:100120,\
+    phase:1,\
+    deny,\
+    t:none,\
+    log,\
+    msg:'%{MATCHED_VAR_NAME} was caught in phase:1',\
+    ver:'MRTS/0.1'"
+
+SecRule REQUEST_COOKIES:cookie1 "@contains attack" \
+    "id:100121,\
+    phase:2,\
+    deny,\
+    t:none,\
+    log,\
+    msg:'%{MATCHED_VAR_NAME} was caught in phase:2',\
+    ver:'MRTS/0.1'"
+
+SecRule REQUEST_COOKIES:cookie1 "@contains attack" \
+    "id:100122,\
+    phase:3,\
+    deny,\
+    t:none,\
+    log,\
+    msg:'%{MATCHED_VAR_NAME} was caught in phase:3',\
+    ver:'MRTS/0.1'"
+
+SecRule REQUEST_COOKIES:cookie1 "@contains attack" \
+    "id:100123,\
+    phase:4,\
+    deny,\
+    t:none,\
+    log,\
+    msg:'%{MATCHED_VAR_NAME} was caught in phase:4',\
+    ver:'MRTS/0.1'"
+
+SecRule REQUEST_COOKIES:cookie1|REQUEST_COOKIES:cookie2 "@contains attack" \
+    "id:100124,\
+    phase:1,\
+    deny,\
+    t:none,\
+    log,\
+    msg:'%{MATCHED_VAR_NAME} was caught in phase:1',\
+    ver:'MRTS/0.1'"
+
+SecRule REQUEST_COOKIES:cookie1|REQUEST_COOKIES:cookie2 "@contains attack" \
+    "id:100125,\
+    phase:2,\
+    deny,\
+    t:none,\
+    log,\
+    msg:'%{MATCHED_VAR_NAME} was caught in phase:2',\
+    ver:'MRTS/0.1'"
+
+SecRule REQUEST_COOKIES:cookie1|REQUEST_COOKIES:cookie2 "@contains attack" \
+    "id:100126,\
+    phase:3,\
+    deny,\
+    t:none,\
+    log,\
+    msg:'%{MATCHED_VAR_NAME} was caught in phase:3',\
+    ver:'MRTS/0.1'"
+
+SecRule REQUEST_COOKIES:cookie1|REQUEST_COOKIES:cookie2 "@contains attack" \
+    "id:100127,\
+    phase:4,\
+    deny,\
+    t:none,\
+    log,\
+    msg:'%{MATCHED_VAR_NAME} was caught in phase:4',\
+    ver:'MRTS/0.1'"
+
+SecRule REQUEST_COOKIES:/^cookie_.*$/ "@contains attack" \
+    "id:100128,\
+    phase:1,\
+    deny,\
+    t:none,\
+    log,\
+    msg:'%{MATCHED_VAR_NAME} was caught in phase:1',\
+    ver:'MRTS/0.1'"
+
+SecRule REQUEST_COOKIES:/^cookie_.*$/ "@contains attack" \
+    "id:100129,\
+    phase:2,\
+    deny,\
+    t:none,\
+    log,\
+    msg:'%{MATCHED_VAR_NAME} was caught in phase:2',\
+    ver:'MRTS/0.1'"
+
+SecRule REQUEST_COOKIES:/^cookie_.*$/ "@contains attack" \
+    "id:100130,\
+    phase:3,\
+    deny,\
+    t:none,\
+    log,\
+    msg:'%{MATCHED_VAR_NAME} was caught in phase:3',\
+    ver:'MRTS/0.1'"
+
+SecRule REQUEST_COOKIES:/^cookie_.*$/ "@contains attack" \
+    "id:100131,\
+    phase:4,\
+    deny,\
+    t:none,\
+    log,\
+    msg:'%{MATCHED_VAR_NAME} was caught in phase:4',\
+    ver:'MRTS/0.1'"
+
diff --git a/generated/rules/MRTS_110_XML.conf b/generated/rules/MRTS_110_XML.conf
index f673f8a..68af016 100644
--- a/generated/rules/MRTS_110_XML.conf
+++ b/generated/rules/MRTS_110_XML.conf
@@ -1,5 +1,5 @@
 SecRule XML:/* "@beginsWith foo" \
-    "id:100116,\
+    "id:100132,\
     phase:2,\
     deny,\
     t:none,\
@@ -8,7 +8,7 @@ SecRule XML:/* "@beginsWith foo" \
     ver:'MRTS/0.1'"
 
 SecRule XML:/* "@beginsWith foo" \
-    "id:100117,\
+    "id:100133,\
     phase:3,\
     deny,\
     t:none,\
@@ -17,7 +17,7 @@ SecRule XML:/* "@beginsWith foo" \
     ver:'MRTS/0.1'"
 
 SecRule XML:/* "@beginsWith foo" \
-    "id:100118,\
+    "id:100134,\
     phase:4,\
     deny,\
     t:none,\
diff --git a/generated/tests/regression/tests/100116_MRTS_059_REQUEST_COOKIES.yaml b/generated/tests/regression/tests/100116_MRTS_059_REQUEST_COOKIES.yaml
new file mode 100644
index 0000000..ed8a0ca
--- /dev/null
+++ b/generated/tests/regression/tests/100116_MRTS_059_REQUEST_COOKIES.yaml
@@ -0,0 +1,161 @@
+---
+meta:
+  author: MRTS generate-rules.py
+  enabled: true
+  name: MRTS_059_REQUEST_COOKIES.yaml
+  description: Desc
+tests:
+- test_title: 100116-1
+  ruleid: 100116
+  test_id: 1
+  desc: 'Test case for rule 100116, #1'
+  stages:
+  - description: Send request
+    input:
+      dest_addr: 127.0.0.1
+      port: 80
+      protocol: http
+      method: GET
+      headers:
+        User-Agent: OWASP MRTS test agent
+        Host: localhost
+        Accept: text/xml,application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
+        Cookie: foo=attack
+      uri: /
+      version: HTTP/1.1
+    output:
+      log:
+        expect_ids:
+        - 100116
+- test_title: 100116-2
+  ruleid: 100116
+  test_id: 2
+  desc: 'Test case for rule 100116, #2'
+  stages:
+  - description: Send request
+    input:
+      dest_addr: 127.0.0.1
+      port: 80
+      protocol: http
+      method: GET
+      headers:
+        User-Agent: OWASP MRTS test agent
+        Host: localhost
+        Accept: text/xml,application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
+        Cookie: cookie1=attack
+      uri: /
+      version: HTTP/1.1
+    output:
+      log:
+        expect_ids:
+        - 100116
+- test_title: 100116-3
+  ruleid: 100116
+  test_id: 3
+  desc: 'Test case for rule 100116, #3'
+  stages:
+  - description: Send request
+    input:
+      dest_addr: 127.0.0.1
+      port: 80
+      protocol: http
+      method: GET
+      headers:
+        User-Agent: OWASP MRTS test agent
+        Host: localhost
+        Accept: text/xml,application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
+        Cookie: cookie1=attack;cookie2=hello
+      uri: /
+      version: HTTP/1.1
+    output:
+      log:
+        expect_ids:
+        - 100116
+- test_title: 100116-4
+  ruleid: 100116
+  test_id: 4
+  desc: 'Test case for rule 100116, #4'
+  stages:
+  - description: Send request
+    input:
+      dest_addr: 127.0.0.1
+      port: 80
+      protocol: http
+      method: GET
+      headers:
+        User-Agent: OWASP MRTS test agent
+        Host: localhost
+        Accept: text/xml,application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
+        Cookie: cookie2=attack
+      uri: /
+      version: HTTP/1.1
+    output:
+      log:
+        expect_ids:
+        - 100116
+- test_title: 100116-5
+  ruleid: 100116
+  test_id: 5
+  desc: 'Test case for rule 100116, #5'
+  stages:
+  - description: Send request
+    input:
+      dest_addr: 127.0.0.1
+      port: 80
+      protocol: http
+      method: GET
+      headers:
+        User-Agent: OWASP MRTS test agent
+        Host: localhost
+        Accept: text/xml,application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
+        Cookie: cookie1=hello;cookie2=attack
+      uri: /
+      version: HTTP/1.1
+    output:
+      log:
+        expect_ids:
+        - 100116
+- test_title: 100116-6
+  ruleid: 100116
+  test_id: 6
+  desc: 'Test case for rule 100116, #6'
+  stages:
+  - description: Send request
+    input:
+      dest_addr: 127.0.0.1
+      port: 80
+      protocol: http
+      method: GET
+      headers:
+        User-Agent: OWASP MRTS test agent
+        Host: localhost
+        Accept: text/xml,application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
+        Cookie: cookie_foo=attack
+      uri: /
+      version: HTTP/1.1
+    output:
+      log:
+        expect_ids:
+        - 100116
+- test_title: 100116-7
+  ruleid: 100116
+  test_id: 7
+  desc: 'Test case for rule 100116, #7'
+  stages:
+  - description: Send request
+    input:
+      dest_addr: 127.0.0.1
+      port: 80
+      protocol: http
+      method: GET
+      headers:
+        User-Agent: OWASP MRTS test agent
+        Host: localhost
+        Accept: text/xml,application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
+        Cookie: cookie_bar=hello;cookie_foo=attack;cookie_foobar=world
+      uri: /
+      version: HTTP/1.1
+    output:
+      log:
+        expect_ids:
+        - 100116
diff --git a/generated/tests/regression/tests/100117_MRTS_059_REQUEST_COOKIES.yaml b/generated/tests/regression/tests/100117_MRTS_059_REQUEST_COOKIES.yaml
new file mode 100644
index 0000000..9a0121a
--- /dev/null
+++ b/generated/tests/regression/tests/100117_MRTS_059_REQUEST_COOKIES.yaml
@@ -0,0 +1,161 @@
+---
+meta:
+  author: MRTS generate-rules.py
+  enabled: true
+  name: MRTS_059_REQUEST_COOKIES.yaml
+  description: Desc
+tests:
+- test_title: 100117-1
+  ruleid: 100117
+  test_id: 1
+  desc: 'Test case for rule 100117, #1'
+  stages:
+  - description: Send request
+    input:
+      dest_addr: 127.0.0.1
+      port: 80
+      protocol: http
+      method: POST
+      headers:
+        User-Agent: OWASP MRTS test agent
+        Host: localhost
+        Accept: text/xml,application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
+        Cookie: foo=attack
+      uri: /post
+      version: HTTP/1.1
+    output:
+      log:
+        expect_ids:
+        - 100117
+- test_title: 100117-2
+  ruleid: 100117
+  test_id: 2
+  desc: 'Test case for rule 100117, #2'
+  stages:
+  - description: Send request
+    input:
+      dest_addr: 127.0.0.1
+      port: 80
+      protocol: http
+      method: POST
+      headers:
+        User-Agent: OWASP MRTS test agent
+        Host: localhost
+        Accept: text/xml,application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
+        Cookie: cookie1=attack
+      uri: /post
+      version: HTTP/1.1
+    output:
+      log:
+        expect_ids:
+        - 100117
+- test_title: 100117-3
+  ruleid: 100117
+  test_id: 3
+  desc: 'Test case for rule 100117, #3'
+  stages:
+  - description: Send request
+    input:
+      dest_addr: 127.0.0.1
+      port: 80
+      protocol: http
+      method: POST
+      headers:
+        User-Agent: OWASP MRTS test agent
+        Host: localhost
+        Accept: text/xml,application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
+        Cookie: cookie1=attack;cookie2=hello
+      uri: /post
+      version: HTTP/1.1
+    output:
+      log:
+        expect_ids:
+        - 100117
+- test_title: 100117-4
+  ruleid: 100117
+  test_id: 4
+  desc: 'Test case for rule 100117, #4'
+  stages:
+  - description: Send request
+    input:
+      dest_addr: 127.0.0.1
+      port: 80
+      protocol: http
+      method: POST
+      headers:
+        User-Agent: OWASP MRTS test agent
+        Host: localhost
+        Accept: text/xml,application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
+        Cookie: cookie2=attack
+      uri: /post
+      version: HTTP/1.1
+    output:
+      log:
+        expect_ids:
+        - 100117
+- test_title: 100117-5
+  ruleid: 100117
+  test_id: 5
+  desc: 'Test case for rule 100117, #5'
+  stages:
+  - description: Send request
+    input:
+      dest_addr: 127.0.0.1
+      port: 80
+      protocol: http
+      method: POST
+      headers:
+        User-Agent: OWASP MRTS test agent
+        Host: localhost
+        Accept: text/xml,application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
+        Cookie: cookie1=hello;cookie2=attack
+      uri: /post
+      version: HTTP/1.1
+    output:
+      log:
+        expect_ids:
+        - 100117
+- test_title: 100117-6
+  ruleid: 100117
+  test_id: 6
+  desc: 'Test case for rule 100117, #6'
+  stages:
+  - description: Send request
+    input:
+      dest_addr: 127.0.0.1
+      port: 80
+      protocol: http
+      method: POST
+      headers:
+        User-Agent: OWASP MRTS test agent
+        Host: localhost
+        Accept: text/xml,application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
+        Cookie: cookie_foo=attack
+      uri: /post
+      version: HTTP/1.1
+    output:
+      log:
+        expect_ids:
+        - 100117
+- test_title: 100117-7
+  ruleid: 100117
+  test_id: 7
+  desc: 'Test case for rule 100117, #7'
+  stages:
+  - description: Send request
+    input:
+      dest_addr: 127.0.0.1
+      port: 80
+      protocol: http
+      method: POST
+      headers:
+        User-Agent: OWASP MRTS test agent
+        Host: localhost
+        Accept: text/xml,application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
+        Cookie: cookie_bar=hello;cookie_foo=attack;cookie_foobar=world
+      uri: /post
+      version: HTTP/1.1
+    output:
+      log:
+        expect_ids:
+        - 100117
diff --git a/generated/tests/regression/tests/100118_MRTS_059_REQUEST_COOKIES.yaml b/generated/tests/regression/tests/100118_MRTS_059_REQUEST_COOKIES.yaml
new file mode 100644
index 0000000..e175eaa
--- /dev/null
+++ b/generated/tests/regression/tests/100118_MRTS_059_REQUEST_COOKIES.yaml
@@ -0,0 +1,161 @@
+---
+meta:
+  author: MRTS generate-rules.py
+  enabled: true
+  name: MRTS_059_REQUEST_COOKIES.yaml
+  description: Desc
+tests:
+- test_title: 100118-1
+  ruleid: 100118
+  test_id: 1
+  desc: 'Test case for rule 100118, #1'
+  stages:
+  - description: Send request
+    input:
+      dest_addr: 127.0.0.1
+      port: 80
+      protocol: http
+      method: POST
+      headers:
+        User-Agent: OWASP MRTS test agent
+        Host: localhost
+        Accept: text/xml,application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
+        Cookie: foo=attack
+      uri: /post
+      version: HTTP/1.1
+    output:
+      log:
+        expect_ids:
+        - 100118
+- test_title: 100118-2
+  ruleid: 100118
+  test_id: 2
+  desc: 'Test case for rule 100118, #2'
+  stages:
+  - description: Send request
+    input:
+      dest_addr: 127.0.0.1
+      port: 80
+      protocol: http
+      method: POST
+      headers:
+        User-Agent: OWASP MRTS test agent
+        Host: localhost
+        Accept: text/xml,application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
+        Cookie: cookie1=attack
+      uri: /post
+      version: HTTP/1.1
+    output:
+      log:
+        expect_ids:
+        - 100118
+- test_title: 100118-3
+  ruleid: 100118
+  test_id: 3
+  desc: 'Test case for rule 100118, #3'
+  stages:
+  - description: Send request
+    input:
+      dest_addr: 127.0.0.1
+      port: 80
+      protocol: http
+      method: POST
+      headers:
+        User-Agent: OWASP MRTS test agent
+        Host: localhost
+        Accept: text/xml,application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
+        Cookie: cookie1=attack;cookie2=hello
+      uri: /post
+      version: HTTP/1.1
+    output:
+      log:
+        expect_ids:
+        - 100118
+- test_title: 100118-4
+  ruleid: 100118
+  test_id: 4
+  desc: 'Test case for rule 100118, #4'
+  stages:
+  - description: Send request
+    input:
+      dest_addr: 127.0.0.1
+      port: 80
+      protocol: http
+      method: POST
+      headers:
+        User-Agent: OWASP MRTS test agent
+        Host: localhost
+        Accept: text/xml,application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
+        Cookie: cookie2=attack
+      uri: /post
+      version: HTTP/1.1
+    output:
+      log:
+        expect_ids:
+        - 100118
+- test_title: 100118-5
+  ruleid: 100118
+  test_id: 5
+  desc: 'Test case for rule 100118, #5'
+  stages:
+  - description: Send request
+    input:
+      dest_addr: 127.0.0.1
+      port: 80
+      protocol: http
+      method: POST
+      headers:
+        User-Agent: OWASP MRTS test agent
+        Host: localhost
+        Accept: text/xml,application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
+        Cookie: cookie1=hello;cookie2=attack
+      uri: /post
+      version: HTTP/1.1
+    output:
+      log:
+        expect_ids:
+        - 100118
+- test_title: 100118-6
+  ruleid: 100118
+  test_id: 6
+  desc: 'Test case for rule 100118, #6'
+  stages:
+  - description: Send request
+    input:
+      dest_addr: 127.0.0.1
+      port: 80
+      protocol: http
+      method: POST
+      headers:
+        User-Agent: OWASP MRTS test agent
+        Host: localhost
+        Accept: text/xml,application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
+        Cookie: cookie_foo=attack
+      uri: /post
+      version: HTTP/1.1
+    output:
+      log:
+        expect_ids:
+        - 100118
+- test_title: 100118-7
+  ruleid: 100118
+  test_id: 7
+  desc: 'Test case for rule 100118, #7'
+  stages:
+  - description: Send request
+    input:
+      dest_addr: 127.0.0.1
+      port: 80
+      protocol: http
+      method: POST
+      headers:
+        User-Agent: OWASP MRTS test agent
+        Host: localhost
+        Accept: text/xml,application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
+        Cookie: cookie_bar=hello;cookie_foo=attack;cookie_foobar=world
+      uri: /post
+      version: HTTP/1.1
+    output:
+      log:
+        expect_ids:
+        - 100118
diff --git a/generated/tests/regression/tests/100119_MRTS_059_REQUEST_COOKIES.yaml b/generated/tests/regression/tests/100119_MRTS_059_REQUEST_COOKIES.yaml
new file mode 100644
index 0000000..106cda1
--- /dev/null
+++ b/generated/tests/regression/tests/100119_MRTS_059_REQUEST_COOKIES.yaml
@@ -0,0 +1,161 @@
+---
+meta:
+  author: MRTS generate-rules.py
+  enabled: true
+  name: MRTS_059_REQUEST_COOKIES.yaml
+  description: Desc
+tests:
+- test_title: 100119-1
+  ruleid: 100119
+  test_id: 1
+  desc: 'Test case for rule 100119, #1'
+  stages:
+  - description: Send request
+    input:
+      dest_addr: 127.0.0.1
+      port: 80
+      protocol: http
+      method: POST
+      headers:
+        User-Agent: OWASP MRTS test agent
+        Host: localhost
+        Accept: text/xml,application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
+        Cookie: foo=attack
+      uri: /post
+      version: HTTP/1.1
+    output:
+      log:
+        expect_ids:
+        - 100119
+- test_title: 100119-2
+  ruleid: 100119
+  test_id: 2
+  desc: 'Test case for rule 100119, #2'
+  stages:
+  - description: Send request
+    input:
+      dest_addr: 127.0.0.1
+      port: 80
+      protocol: http
+      method: POST
+      headers:
+        User-Agent: OWASP MRTS test agent
+        Host: localhost
+        Accept: text/xml,application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
+        Cookie: cookie1=attack
+      uri: /post
+      version: HTTP/1.1
+    output:
+      log:
+        expect_ids:
+        - 100119
+- test_title: 100119-3
+  ruleid: 100119
+  test_id: 3
+  desc: 'Test case for rule 100119, #3'
+  stages:
+  - description: Send request
+    input:
+      dest_addr: 127.0.0.1
+      port: 80
+      protocol: http
+      method: POST
+      headers:
+        User-Agent: OWASP MRTS test agent
+        Host: localhost
+        Accept: text/xml,application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
+        Cookie: cookie1=attack;cookie2=hello
+      uri: /post
+      version: HTTP/1.1
+    output:
+      log:
+        expect_ids:
+        - 100119
+- test_title: 100119-4
+  ruleid: 100119
+  test_id: 4
+  desc: 'Test case for rule 100119, #4'
+  stages:
+  - description: Send request
+    input:
+      dest_addr: 127.0.0.1
+      port: 80
+      protocol: http
+      method: POST
+      headers:
+        User-Agent: OWASP MRTS test agent
+        Host: localhost
+        Accept: text/xml,application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
+        Cookie: cookie2=attack
+      uri: /post
+      version: HTTP/1.1
+    output:
+      log:
+        expect_ids:
+        - 100119
+- test_title: 100119-5
+  ruleid: 100119
+  test_id: 5
+  desc: 'Test case for rule 100119, #5'
+  stages:
+  - description: Send request
+    input:
+      dest_addr: 127.0.0.1
+      port: 80
+      protocol: http
+      method: POST
+      headers:
+        User-Agent: OWASP MRTS test agent
+        Host: localhost
+        Accept: text/xml,application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
+        Cookie: cookie1=hello;cookie2=attack
+      uri: /post
+      version: HTTP/1.1
+    output:
+      log:
+        expect_ids:
+        - 100119
+- test_title: 100119-6
+  ruleid: 100119
+  test_id: 6
+  desc: 'Test case for rule 100119, #6'
+  stages:
+  - description: Send request
+    input:
+      dest_addr: 127.0.0.1
+      port: 80
+      protocol: http
+      method: POST
+      headers:
+        User-Agent: OWASP MRTS test agent
+        Host: localhost
+        Accept: text/xml,application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
+        Cookie: cookie_foo=attack
+      uri: /post
+      version: HTTP/1.1
+    output:
+      log:
+        expect_ids:
+        - 100119
+- test_title: 100119-7
+  ruleid: 100119
+  test_id: 7
+  desc: 'Test case for rule 100119, #7'
+  stages:
+  - description: Send request
+    input:
+      dest_addr: 127.0.0.1
+      port: 80
+      protocol: http
+      method: POST
+      headers:
+        User-Agent: OWASP MRTS test agent
+        Host: localhost
+        Accept: text/xml,application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
+        Cookie: cookie_bar=hello;cookie_foo=attack;cookie_foobar=world
+      uri: /post
+      version: HTTP/1.1
+    output:
+      log:
+        expect_ids:
+        - 100119
diff --git a/generated/tests/regression/tests/100120_MRTS_059_REQUEST_COOKIES.yaml b/generated/tests/regression/tests/100120_MRTS_059_REQUEST_COOKIES.yaml
new file mode 100644
index 0000000..dfcea5f
--- /dev/null
+++ b/generated/tests/regression/tests/100120_MRTS_059_REQUEST_COOKIES.yaml
@@ -0,0 +1,51 @@
+---
+meta:
+  author: MRTS generate-rules.py
+  enabled: true
+  name: MRTS_059_REQUEST_COOKIES.yaml
+  description: Desc
+tests:
+- test_title: 100120-1
+  ruleid: 100120
+  test_id: 1
+  desc: 'Test case for rule 100120, #1'
+  stages:
+  - description: Send request
+    input:
+      dest_addr: 127.0.0.1
+      port: 80
+      protocol: http
+      method: GET
+      headers:
+        User-Agent: OWASP MRTS test agent
+        Host: localhost
+        Accept: text/xml,application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
+        Cookie: cookie1=attack
+      uri: /
+      version: HTTP/1.1
+    output:
+      log:
+        expect_ids:
+        - 100120
+- test_title: 100120-2
+  ruleid: 100120
+  test_id: 2
+  desc: 'Test case for rule 100120, #2'
+  stages:
+  - description: Send request
+    input:
+      dest_addr: 127.0.0.1
+      port: 80
+      protocol: http
+      method: GET
+      headers:
+        User-Agent: OWASP MRTS test agent
+        Host: localhost
+        Accept: text/xml,application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
+        Cookie: cookie1=attack;cookie2=hello
+      uri: /
+      version: HTTP/1.1
+    output:
+      log:
+        expect_ids:
+        - 100120
diff --git a/generated/tests/regression/tests/100121_MRTS_059_REQUEST_COOKIES.yaml b/generated/tests/regression/tests/100121_MRTS_059_REQUEST_COOKIES.yaml
new file mode 100644
index 0000000..5c7dcd7
--- /dev/null
+++ b/generated/tests/regression/tests/100121_MRTS_059_REQUEST_COOKIES.yaml
@@ -0,0 +1,51 @@
+---
+meta:
+  author: MRTS generate-rules.py
+  enabled: true
+  name: MRTS_059_REQUEST_COOKIES.yaml
+  description: Desc
+tests:
+- test_title: 100121-1
+  ruleid: 100121
+  test_id: 1
+  desc: 'Test case for rule 100121, #1'
+  stages:
+  - description: Send request
+    input:
+      dest_addr: 127.0.0.1
+      port: 80
+      protocol: http
+      method: POST
+      headers:
+        User-Agent: OWASP MRTS test agent
+        Host: localhost
+        Accept: text/xml,application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
+        Cookie: cookie1=attack
+      uri: /post
+      version: HTTP/1.1
+    output:
+      log:
+        expect_ids:
+        - 100121
+- test_title: 100121-2
+  ruleid: 100121
+  test_id: 2
+  desc: 'Test case for rule 100121, #2'
+  stages:
+  - description: Send request
+    input:
+      dest_addr: 127.0.0.1
+      port: 80
+      protocol: http
+      method: POST
+      headers:
+        User-Agent: OWASP MRTS test agent
+        Host: localhost
+        Accept: text/xml,application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
+        Cookie: cookie1=attack;cookie2=hello
+      uri: /post
+      version: HTTP/1.1
+    output:
+      log:
+        expect_ids:
+        - 100121
diff --git a/generated/tests/regression/tests/100122_MRTS_059_REQUEST_COOKIES.yaml b/generated/tests/regression/tests/100122_MRTS_059_REQUEST_COOKIES.yaml
new file mode 100644
index 0000000..ae956b0
--- /dev/null
+++ b/generated/tests/regression/tests/100122_MRTS_059_REQUEST_COOKIES.yaml
@@ -0,0 +1,51 @@
+---
+meta:
+  author: MRTS generate-rules.py
+  enabled: true
+  name: MRTS_059_REQUEST_COOKIES.yaml
+  description: Desc
+tests:
+- test_title: 100122-1
+  ruleid: 100122
+  test_id: 1
+  desc: 'Test case for rule 100122, #1'
+  stages:
+  - description: Send request
+    input:
+      dest_addr: 127.0.0.1
+      port: 80
+      protocol: http
+      method: POST
+      headers:
+        User-Agent: OWASP MRTS test agent
+        Host: localhost
+        Accept: text/xml,application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
+        Cookie: cookie1=attack
+      uri: /post
+      version: HTTP/1.1
+    output:
+      log:
+        expect_ids:
+        - 100122
+- test_title: 100122-2
+  ruleid: 100122
+  test_id: 2
+  desc: 'Test case for rule 100122, #2'
+  stages:
+  - description: Send request
+    input:
+      dest_addr: 127.0.0.1
+      port: 80
+      protocol: http
+      method: POST
+      headers:
+        User-Agent: OWASP MRTS test agent
+        Host: localhost
+        Accept: text/xml,application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
+        Cookie: cookie1=attack;cookie2=hello
+      uri: /post
+      version: HTTP/1.1
+    output:
+      log:
+        expect_ids:
+        - 100122
diff --git a/generated/tests/regression/tests/100123_MRTS_059_REQUEST_COOKIES.yaml b/generated/tests/regression/tests/100123_MRTS_059_REQUEST_COOKIES.yaml
new file mode 100644
index 0000000..cdc699c
--- /dev/null
+++ b/generated/tests/regression/tests/100123_MRTS_059_REQUEST_COOKIES.yaml
@@ -0,0 +1,51 @@
+---
+meta:
+  author: MRTS generate-rules.py
+  enabled: true
+  name: MRTS_059_REQUEST_COOKIES.yaml
+  description: Desc
+tests:
+- test_title: 100123-1
+  ruleid: 100123
+  test_id: 1
+  desc: 'Test case for rule 100123, #1'
+  stages:
+  - description: Send request
+    input:
+      dest_addr: 127.0.0.1
+      port: 80
+      protocol: http
+      method: POST
+      headers:
+        User-Agent: OWASP MRTS test agent
+        Host: localhost
+        Accept: text/xml,application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
+        Cookie: cookie1=attack
+      uri: /post
+      version: HTTP/1.1
+    output:
+      log:
+        expect_ids:
+        - 100123
+- test_title: 100123-2
+  ruleid: 100123
+  test_id: 2
+  desc: 'Test case for rule 100123, #2'
+  stages:
+  - description: Send request
+    input:
+      dest_addr: 127.0.0.1
+      port: 80
+      protocol: http
+      method: POST
+      headers:
+        User-Agent: OWASP MRTS test agent
+        Host: localhost
+        Accept: text/xml,application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
+        Cookie: cookie1=attack;cookie2=hello
+      uri: /post
+      version: HTTP/1.1
+    output:
+      log:
+        expect_ids:
+        - 100123
diff --git a/generated/tests/regression/tests/100124_MRTS_059_REQUEST_COOKIES.yaml b/generated/tests/regression/tests/100124_MRTS_059_REQUEST_COOKIES.yaml
new file mode 100644
index 0000000..28f5dc9
--- /dev/null
+++ b/generated/tests/regression/tests/100124_MRTS_059_REQUEST_COOKIES.yaml
@@ -0,0 +1,95 @@
+---
+meta:
+  author: MRTS generate-rules.py
+  enabled: true
+  name: MRTS_059_REQUEST_COOKIES.yaml
+  description: Desc
+tests:
+- test_title: 100124-1
+  ruleid: 100124
+  test_id: 1
+  desc: 'Test case for rule 100124, #1'
+  stages:
+  - description: Send request
+    input:
+      dest_addr: 127.0.0.1
+      port: 80
+      protocol: http
+      method: GET
+      headers:
+        User-Agent: OWASP MRTS test agent
+        Host: localhost
+        Accept: text/xml,application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
+        Cookie: cookie1=attack
+      uri: /
+      version: HTTP/1.1
+    output:
+      log:
+        expect_ids:
+        - 100124
+- test_title: 100124-2
+  ruleid: 100124
+  test_id: 2
+  desc: 'Test case for rule 100124, #2'
+  stages:
+  - description: Send request
+    input:
+      dest_addr: 127.0.0.1
+      port: 80
+      protocol: http
+      method: GET
+      headers:
+        User-Agent: OWASP MRTS test agent
+        Host: localhost
+        Accept: text/xml,application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
+        Cookie: cookie1=attack;cookie2=hello
+      uri: /
+      version: HTTP/1.1
+    output:
+      log:
+        expect_ids:
+        - 100124
+- test_title: 100124-3
+  ruleid: 100124
+  test_id: 3
+  desc: 'Test case for rule 100124, #3'
+  stages:
+  - description: Send request
+    input:
+      dest_addr: 127.0.0.1
+      port: 80
+      protocol: http
+      method: GET
+      headers:
+        User-Agent: OWASP MRTS test agent
+        Host: localhost
+        Accept: text/xml,application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
+        Cookie: cookie2=attack
+      uri: /
+      version: HTTP/1.1
+    output:
+      log:
+        expect_ids:
+        - 100124
+- test_title: 100124-4
+  ruleid: 100124
+  test_id: 4
+  desc: 'Test case for rule 100124, #4'
+  stages:
+  - description: Send request
+    input:
+      dest_addr: 127.0.0.1
+      port: 80
+      protocol: http
+      method: GET
+      headers:
+        User-Agent: OWASP MRTS test agent
+        Host: localhost
+        Accept: text/xml,application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
+        Cookie: cookie1=hello;cookie2=attack
+      uri: /
+      version: HTTP/1.1
+    output:
+      log:
+        expect_ids:
+        - 100124
diff --git a/generated/tests/regression/tests/100125_MRTS_059_REQUEST_COOKIES.yaml b/generated/tests/regression/tests/100125_MRTS_059_REQUEST_COOKIES.yaml
new file mode 100644
index 0000000..37b91e5
--- /dev/null
+++ b/generated/tests/regression/tests/100125_MRTS_059_REQUEST_COOKIES.yaml
@@ -0,0 +1,95 @@
+---
+meta:
+  author: MRTS generate-rules.py
+  enabled: true
+  name: MRTS_059_REQUEST_COOKIES.yaml
+  description: Desc
+tests:
+- test_title: 100125-1
+  ruleid: 100125
+  test_id: 1
+  desc: 'Test case for rule 100125, #1'
+  stages:
+  - description: Send request
+    input:
+      dest_addr: 127.0.0.1
+      port: 80
+      protocol: http
+      method: POST
+      headers:
+        User-Agent: OWASP MRTS test agent
+        Host: localhost
+        Accept: text/xml,application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
+        Cookie: cookie1=attack
+      uri: /post
+      version: HTTP/1.1
+    output:
+      log:
+        expect_ids:
+        - 100125
+- test_title: 100125-2
+  ruleid: 100125
+  test_id: 2
+  desc: 'Test case for rule 100125, #2'
+  stages:
+  - description: Send request
+    input:
+      dest_addr: 127.0.0.1
+      port: 80
+      protocol: http
+      method: POST
+      headers:
+        User-Agent: OWASP MRTS test agent
+        Host: localhost
+        Accept: text/xml,application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
+        Cookie: cookie1=attack;cookie2=hello
+      uri: /post
+      version: HTTP/1.1
+    output:
+      log:
+        expect_ids:
+        - 100125
+- test_title: 100125-3
+  ruleid: 100125
+  test_id: 3
+  desc: 'Test case for rule 100125, #3'
+  stages:
+  - description: Send request
+    input:
+      dest_addr: 127.0.0.1
+      port: 80
+      protocol: http
+      method: POST
+      headers:
+        User-Agent: OWASP MRTS test agent
+        Host: localhost
+        Accept: text/xml,application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
+        Cookie: cookie2=attack
+      uri: /post
+      version: HTTP/1.1
+    output:
+      log:
+        expect_ids:
+        - 100125
+- test_title: 100125-4
+  ruleid: 100125
+  test_id: 4
+  desc: 'Test case for rule 100125, #4'
+  stages:
+  - description: Send request
+    input:
+      dest_addr: 127.0.0.1
+      port: 80
+      protocol: http
+      method: POST
+      headers:
+        User-Agent: OWASP MRTS test agent
+        Host: localhost
+        Accept: text/xml,application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
+        Cookie: cookie1=hello;cookie2=attack
+      uri: /post
+      version: HTTP/1.1
+    output:
+      log:
+        expect_ids:
+        - 100125
diff --git a/generated/tests/regression/tests/100126_MRTS_059_REQUEST_COOKIES.yaml b/generated/tests/regression/tests/100126_MRTS_059_REQUEST_COOKIES.yaml
new file mode 100644
index 0000000..f6326a2
--- /dev/null
+++ b/generated/tests/regression/tests/100126_MRTS_059_REQUEST_COOKIES.yaml
@@ -0,0 +1,95 @@
+---
+meta:
+  author: MRTS generate-rules.py
+  enabled: true
+  name: MRTS_059_REQUEST_COOKIES.yaml
+  description: Desc
+tests:
+- test_title: 100126-1
+  ruleid: 100126
+  test_id: 1
+  desc: 'Test case for rule 100126, #1'
+  stages:
+  - description: Send request
+    input:
+      dest_addr: 127.0.0.1
+      port: 80
+      protocol: http
+      method: POST
+      headers:
+        User-Agent: OWASP MRTS test agent
+        Host: localhost
+        Accept: text/xml,application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
+        Cookie: cookie1=attack
+      uri: /post
+      version: HTTP/1.1
+    output:
+      log:
+        expect_ids:
+        - 100126
+- test_title: 100126-2
+  ruleid: 100126
+  test_id: 2
+  desc: 'Test case for rule 100126, #2'
+  stages:
+  - description: Send request
+    input:
+      dest_addr: 127.0.0.1
+      port: 80
+      protocol: http
+      method: POST
+      headers:
+        User-Agent: OWASP MRTS test agent
+        Host: localhost
+        Accept: text/xml,application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
+        Cookie: cookie1=attack;cookie2=hello
+      uri: /post
+      version: HTTP/1.1
+    output:
+      log:
+        expect_ids:
+        - 100126
+- test_title: 100126-3
+  ruleid: 100126
+  test_id: 3
+  desc: 'Test case for rule 100126, #3'
+  stages:
+  - description: Send request
+    input:
+      dest_addr: 127.0.0.1
+      port: 80
+      protocol: http
+      method: POST
+      headers:
+        User-Agent: OWASP MRTS test agent
+        Host: localhost
+        Accept: text/xml,application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
+        Cookie: cookie2=attack
+      uri: /post
+      version: HTTP/1.1
+    output:
+      log:
+        expect_ids:
+        - 100126
+- test_title: 100126-4
+  ruleid: 100126
+  test_id: 4
+  desc: 'Test case for rule 100126, #4'
+  stages:
+  - description: Send request
+    input:
+      dest_addr: 127.0.0.1
+      port: 80
+      protocol: http
+      method: POST
+      headers:
+        User-Agent: OWASP MRTS test agent
+        Host: localhost
+        Accept: text/xml,application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
+        Cookie: cookie1=hello;cookie2=attack
+      uri: /post
+      version: HTTP/1.1
+    output:
+      log:
+        expect_ids:
+        - 100126
diff --git a/generated/tests/regression/tests/100127_MRTS_059_REQUEST_COOKIES.yaml b/generated/tests/regression/tests/100127_MRTS_059_REQUEST_COOKIES.yaml
new file mode 100644
index 0000000..05b84c4
--- /dev/null
+++ b/generated/tests/regression/tests/100127_MRTS_059_REQUEST_COOKIES.yaml
@@ -0,0 +1,95 @@
+---
+meta:
+  author: MRTS generate-rules.py
+  enabled: true
+  name: MRTS_059_REQUEST_COOKIES.yaml
+  description: Desc
+tests:
+- test_title: 100127-1
+  ruleid: 100127
+  test_id: 1
+  desc: 'Test case for rule 100127, #1'
+  stages:
+  - description: Send request
+    input:
+      dest_addr: 127.0.0.1
+      port: 80
+      protocol: http
+      method: POST
+      headers:
+        User-Agent: OWASP MRTS test agent
+        Host: localhost
+        Accept: text/xml,application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
+        Cookie: cookie1=attack
+      uri: /post
+      version: HTTP/1.1
+    output:
+      log:
+        expect_ids:
+        - 100127
+- test_title: 100127-2
+  ruleid: 100127
+  test_id: 2
+  desc: 'Test case for rule 100127, #2'
+  stages:
+  - description: Send request
+    input:
+      dest_addr: 127.0.0.1
+      port: 80
+      protocol: http
+      method: POST
+      headers:
+        User-Agent: OWASP MRTS test agent
+        Host: localhost
+        Accept: text/xml,application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
+        Cookie: cookie1=attack;cookie2=hello
+      uri: /post
+      version: HTTP/1.1
+    output:
+      log:
+        expect_ids:
+        - 100127
+- test_title: 100127-3
+  ruleid: 100127
+  test_id: 3
+  desc: 'Test case for rule 100127, #3'
+  stages:
+  - description: Send request
+    input:
+      dest_addr: 127.0.0.1
+      port: 80
+      protocol: http
+      method: POST
+      headers:
+        User-Agent: OWASP MRTS test agent
+        Host: localhost
+        Accept: text/xml,application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
+        Cookie: cookie2=attack
+      uri: /post
+      version: HTTP/1.1
+    output:
+      log:
+        expect_ids:
+        - 100127
+- test_title: 100127-4
+  ruleid: 100127
+  test_id: 4
+  desc: 'Test case for rule 100127, #4'
+  stages:
+  - description: Send request
+    input:
+      dest_addr: 127.0.0.1
+      port: 80
+      protocol: http
+      method: POST
+      headers:
+        User-Agent: OWASP MRTS test agent
+        Host: localhost
+        Accept: text/xml,application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
+        Cookie: cookie1=hello;cookie2=attack
+      uri: /post
+      version: HTTP/1.1
+    output:
+      log:
+        expect_ids:
+        - 100127
diff --git a/generated/tests/regression/tests/100128_MRTS_059_REQUEST_COOKIES.yaml b/generated/tests/regression/tests/100128_MRTS_059_REQUEST_COOKIES.yaml
new file mode 100644
index 0000000..912e9c1
--- /dev/null
+++ b/generated/tests/regression/tests/100128_MRTS_059_REQUEST_COOKIES.yaml
@@ -0,0 +1,51 @@
+---
+meta:
+  author: MRTS generate-rules.py
+  enabled: true
+  name: MRTS_059_REQUEST_COOKIES.yaml
+  description: Desc
+tests:
+- test_title: 100128-1
+  ruleid: 100128
+  test_id: 1
+  desc: 'Test case for rule 100128, #1'
+  stages:
+  - description: Send request
+    input:
+      dest_addr: 127.0.0.1
+      port: 80
+      protocol: http
+      method: GET
+      headers:
+        User-Agent: OWASP MRTS test agent
+        Host: localhost
+        Accept: text/xml,application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
+        Cookie: cookie_foo=attack
+      uri: /
+      version: HTTP/1.1
+    output:
+      log:
+        expect_ids:
+        - 100128
+- test_title: 100128-2
+  ruleid: 100128
+  test_id: 2
+  desc: 'Test case for rule 100128, #2'
+  stages:
+  - description: Send request
+    input:
+      dest_addr: 127.0.0.1
+      port: 80
+      protocol: http
+      method: GET
+      headers:
+        User-Agent: OWASP MRTS test agent
+        Host: localhost
+        Accept: text/xml,application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
+        Cookie: cookie_bar=hello;cookie_foo=attack;cookie_foobar=world
+      uri: /
+      version: HTTP/1.1
+    output:
+      log:
+        expect_ids:
+        - 100128
diff --git a/generated/tests/regression/tests/100129_MRTS_059_REQUEST_COOKIES.yaml b/generated/tests/regression/tests/100129_MRTS_059_REQUEST_COOKIES.yaml
new file mode 100644
index 0000000..d2fd1af
--- /dev/null
+++ b/generated/tests/regression/tests/100129_MRTS_059_REQUEST_COOKIES.yaml
@@ -0,0 +1,51 @@
+---
+meta:
+  author: MRTS generate-rules.py
+  enabled: true
+  name: MRTS_059_REQUEST_COOKIES.yaml
+  description: Desc
+tests:
+- test_title: 100129-1
+  ruleid: 100129
+  test_id: 1
+  desc: 'Test case for rule 100129, #1'
+  stages:
+  - description: Send request
+    input:
+      dest_addr: 127.0.0.1
+      port: 80
+      protocol: http
+      method: POST
+      headers:
+        User-Agent: OWASP MRTS test agent
+        Host: localhost
+        Accept: text/xml,application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
+        Cookie: cookie_foo=attack
+      uri: /post
+      version: HTTP/1.1
+    output:
+      log:
+        expect_ids:
+        - 100129
+- test_title: 100129-2
+  ruleid: 100129
+  test_id: 2
+  desc: 'Test case for rule 100129, #2'
+  stages:
+  - description: Send request
+    input:
+      dest_addr: 127.0.0.1
+      port: 80
+      protocol: http
+      method: POST
+      headers:
+        User-Agent: OWASP MRTS test agent
+        Host: localhost
+        Accept: text/xml,application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
+        Cookie: cookie_bar=hello;cookie_foo=attack;cookie_foobar=world
+      uri: /post
+      version: HTTP/1.1
+    output:
+      log:
+        expect_ids:
+        - 100129
diff --git a/generated/tests/regression/tests/100130_MRTS_059_REQUEST_COOKIES.yaml b/generated/tests/regression/tests/100130_MRTS_059_REQUEST_COOKIES.yaml
new file mode 100644
index 0000000..e0c1754
--- /dev/null
+++ b/generated/tests/regression/tests/100130_MRTS_059_REQUEST_COOKIES.yaml
@@ -0,0 +1,51 @@
+---
+meta:
+  author: MRTS generate-rules.py
+  enabled: true
+  name: MRTS_059_REQUEST_COOKIES.yaml
+  description: Desc
+tests:
+- test_title: 100130-1
+  ruleid: 100130
+  test_id: 1
+  desc: 'Test case for rule 100130, #1'
+  stages:
+  - description: Send request
+    input:
+      dest_addr: 127.0.0.1
+      port: 80
+      protocol: http
+      method: POST
+      headers:
+        User-Agent: OWASP MRTS test agent
+        Host: localhost
+        Accept: text/xml,application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
+        Cookie: cookie_foo=attack
+      uri: /post
+      version: HTTP/1.1
+    output:
+      log:
+        expect_ids:
+        - 100130
+- test_title: 100130-2
+  ruleid: 100130
+  test_id: 2
+  desc: 'Test case for rule 100130, #2'
+  stages:
+  - description: Send request
+    input:
+      dest_addr: 127.0.0.1
+      port: 80
+      protocol: http
+      method: POST
+      headers:
+        User-Agent: OWASP MRTS test agent
+        Host: localhost
+        Accept: text/xml,application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
+        Cookie: cookie_bar=hello;cookie_foo=attack;cookie_foobar=world
+      uri: /post
+      version: HTTP/1.1
+    output:
+      log:
+        expect_ids:
+        - 100130
diff --git a/generated/tests/regression/tests/100131_MRTS_059_REQUEST_COOKIES.yaml b/generated/tests/regression/tests/100131_MRTS_059_REQUEST_COOKIES.yaml
new file mode 100644
index 0000000..871763a
--- /dev/null
+++ b/generated/tests/regression/tests/100131_MRTS_059_REQUEST_COOKIES.yaml
@@ -0,0 +1,51 @@
+---
+meta:
+  author: MRTS generate-rules.py
+  enabled: true
+  name: MRTS_059_REQUEST_COOKIES.yaml
+  description: Desc
+tests:
+- test_title: 100131-1
+  ruleid: 100131
+  test_id: 1
+  desc: 'Test case for rule 100131, #1'
+  stages:
+  - description: Send request
+    input:
+      dest_addr: 127.0.0.1
+      port: 80
+      protocol: http
+      method: POST
+      headers:
+        User-Agent: OWASP MRTS test agent
+        Host: localhost
+        Accept: text/xml,application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
+        Cookie: cookie_foo=attack
+      uri: /post
+      version: HTTP/1.1
+    output:
+      log:
+        expect_ids:
+        - 100131
+- test_title: 100131-2
+  ruleid: 100131
+  test_id: 2
+  desc: 'Test case for rule 100131, #2'
+  stages:
+  - description: Send request
+    input:
+      dest_addr: 127.0.0.1
+      port: 80
+      protocol: http
+      method: POST
+      headers:
+        User-Agent: OWASP MRTS test agent
+        Host: localhost
+        Accept: text/xml,application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
+        Cookie: cookie_bar=hello;cookie_foo=attack;cookie_foobar=world
+      uri: /post
+      version: HTTP/1.1
+    output:
+      log:
+        expect_ids:
+        - 100131
diff --git a/generated/tests/regression/tests/100116_MRTS_110_XML.yaml b/generated/tests/regression/tests/100132_MRTS_110_XML.yaml
similarity index 86%
rename from generated/tests/regression/tests/100116_MRTS_110_XML.yaml
rename to generated/tests/regression/tests/100132_MRTS_110_XML.yaml
index d958307..408247a 100644
--- a/generated/tests/regression/tests/100116_MRTS_110_XML.yaml
+++ b/generated/tests/regression/tests/100132_MRTS_110_XML.yaml
@@ -5,10 +5,10 @@ meta:
   name: MRTS_110_XML.yaml
   description: Desc
 tests:
-- test_title: 100116-1
-  ruleid: 100116
+- test_title: 100132-1
+  ruleid: 100132
   test_id: 1
-  desc: 'Test case for rule 100116, #1'
+  desc: 'Test case for rule 100132, #1'
   stages:
   - description: Send request
     input:
@@ -27,4 +27,4 @@ tests:
     output:
       log:
         expect_ids:
-        - 100116
+        - 100132
diff --git a/generated/tests/regression/tests/100117_MRTS_110_XML.yaml b/generated/tests/regression/tests/100133_MRTS_110_XML.yaml
similarity index 86%
rename from generated/tests/regression/tests/100117_MRTS_110_XML.yaml
rename to generated/tests/regression/tests/100133_MRTS_110_XML.yaml
index 1ab8b40..afa31ca 100644
--- a/generated/tests/regression/tests/100117_MRTS_110_XML.yaml
+++ b/generated/tests/regression/tests/100133_MRTS_110_XML.yaml
@@ -5,10 +5,10 @@ meta:
   name: MRTS_110_XML.yaml
   description: Desc
 tests:
-- test_title: 100117-1
-  ruleid: 100117
+- test_title: 100133-1
+  ruleid: 100133
   test_id: 1
-  desc: 'Test case for rule 100117, #1'
+  desc: 'Test case for rule 100133, #1'
   stages:
   - description: Send request
     input:
@@ -27,4 +27,4 @@ tests:
     output:
       log:
         expect_ids:
-        - 100117
+        - 100133
diff --git a/generated/tests/regression/tests/100118_MRTS_110_XML.yaml b/generated/tests/regression/tests/100134_MRTS_110_XML.yaml
similarity index 86%
rename from generated/tests/regression/tests/100118_MRTS_110_XML.yaml
rename to generated/tests/regression/tests/100134_MRTS_110_XML.yaml
index e08e147..2a37639 100644
--- a/generated/tests/regression/tests/100118_MRTS_110_XML.yaml
+++ b/generated/tests/regression/tests/100134_MRTS_110_XML.yaml
@@ -5,10 +5,10 @@ meta:
   name: MRTS_110_XML.yaml
   description: Desc
 tests:
-- test_title: 100118-1
-  ruleid: 100118
+- test_title: 100134-1
+  ruleid: 100134
   test_id: 1
-  desc: 'Test case for rule 100118, #1'
+  desc: 'Test case for rule 100134, #1'
   stages:
   - description: Send request
     input:
@@ -27,4 +27,4 @@ tests:
     output:
       log:
         expect_ids:
-        - 100118
+        - 100134