Web Application Security

"Be more consistent than everyone around you and you will win

Subject: Web Application Security

  1. OWASP - #1: Broken Authentication and Session Management
    • What is HTTP
    • How web server communicates with web application
    • What is meant by Stateless protocol.
    • What is Session Identifier (ID)
    • Why do web applications use Session ID
    • Identify the pattern of Session ID's in your application.
    • Is your session ID displaying in the URL of the web aplication?
      • Can anyone use the same URL and impersonate the session

      This entry was posted in . Bookmark the permalink.

      Leave a Reply