In this recipe, we examined how the PHPSESSID value assigned to an unauthenticated user remained constant even after authentication. This is a security vulnerability allowing for the session fixation attack.
How it works...
Get Burp Suite Cookbook now with the O’Reilly learning platform.
O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.
