Session Hijacking
Risk Demonstration
Understand how compromised session identifiers can lead to account impersonation.
Secure login demonstration
Application session tracking
Controlled session compromise
Visual account takeover demonstration
After login, the application associates a session identifier with the user.
If the session identifier becomes exposed, another party could potentially reuse it.
If the server accepts the compromised session, the application may associate the request with the original user.