This site is the archived OWASP Foundation Wiki and is no longer accepting Account Requests.
To view the new OWASP Foundation website, please visit https://owasp.org
Difference between revisions of "Testing for Session Management"
From OWASP
(→Session Management Testing) |
(→Session Management Testing) |
||
| Line 1: | Line 1: | ||
=== Session Management Testing === | === Session Management Testing === | ||
| + | ---- | ||
[[ Cookie and Session Token Manipulation AoC|4.5.1 Cookie and Session Token Manipulation]]<br> | [[ Cookie and Session Token Manipulation AoC|4.5.1 Cookie and Session Token Manipulation]]<br> | ||
[[ Weak Session Tokens AoC|4.5.2 Weak Session Tokens ]]<br> | [[ Weak Session Tokens AoC|4.5.2 Weak Session Tokens ]]<br> | ||
| Line 8: | Line 9: | ||
'''Session token transport security and reuse of session tokens from HTTP to HTTPS''' | '''Session token transport security and reuse of session tokens from HTTP to HTTPS''' | ||
[][Completed]Javier Fernandez-Sanguino | [][Completed]Javier Fernandez-Sanguino | ||
| + | |||
| + | [[OWASP Testing Guide v2 Table of Contents]] | ||
Revision as of 22:54, 10 October 2006
Session Management Testing
4.5.1 Cookie and Session Token Manipulation
4.5.2 Weak Session Tokens
4.5.3 Session Riding
4.5.4 Exposed Session Variables
4.5.5 HTTP Exploit
Session token transport security and reuse of session tokens from HTTP to HTTPS [][Completed]Javier Fernandez-Sanguino
