Burp Suite Enterprise Edition is now available in our secure Cloud  –  Learn more

ProfessionalCommunity Edition

Testing session management mechanisms

  • Last updated: June 18, 2024

  • Read time: 1 Minute

Session management mechanisms allow servers to remember users across multiple HTTP interactions, without the users having to continually re-authenticate.

If there are vulnerabilities in the way these mechanisms are managed, an attacker may be able to access another user's session, and carry out actions on behalf of that user.

You can use Burp's automated and manual tools to test session management mechanisms for a range of vulnerabilities.

Was this article helpful?