httpOnly cookie

Session Management Testing in Web Application Security

by

Session Management Testing is an important part of Web Application Vulnerability Assessment and Penetration Testing (VAPT). After a user successfully logs in to a web application, the application uses a Session ID or Session Token to identify and maintain the authenticated user’s session. Since HTTP is a stateless protocol, web applications rely on session cookies … Read more

Website Banner Grabbing with Web Developer Tools

by
Website-Banner-Grabbing-with-Web-Developer-Tools

Website reconnaissance is one of the first phases of a security assessment or penetration test. Before testing for vulnerabilities, security professionals gather information about the target application, including technologies used, cookies, security headers, server details, and supported HTTP methods. One of the easiest ways to perform this initial analysis is by using the built-in Web … Read more