Assessing Session Management Mechanisms

In this chapter, we will cover the following recipes:

  • Testing session token strength using Sequencer
  • Testing for cookie attributes
  • Testing for session fixation
  • Testing for exposed session variables
  • Testing for Cross-Site Request Forgery

Get Burp Suite Cookbook now with O’Reilly online learning.

O’Reilly members experience live online training, plus books, videos, and digital content from 200+ publishers.