Testing session management mechanisms
Last updated: March 24, 2023
Read time: 1 Minute
Session management mechanisms allow servers to remember users across multiple HTTP interactions, without the users having to continually re-authenticate.
If there are vulnerabilities in the way these mechanisms are managed, an attacker may be able to access another user's session, and carry out actions on behalf of that user.
You can use Burp's automated and manual tools to test session management mechanisms for a range of vulnerabilities.
Tutorials in this section
Was this article helpful?
An error occurred, please try again.