Featured resource
pluralsight tech forecast
2025 Tech Forecast

Which technologies will dominate in 2025? And what skills do you need to keep up?

Check it out
Hamburger Icon
  • Course
    • Libraries: If you want this course, consider one of these libraries.
    • Security

Web Application Penetration Testing: Session Management Testing

Learn what to look for while penetration testing session management using OWASP principles including brute-forcing, taking advantage of poorly implemented session fixation, and POST and GET requests implemented incorrectly to find weak spots.

Clark Voss - Pluralsight course - Web Application Penetration Testing: Session Management Testing
by Clark Voss

What you'll learn

Poorly implemented session management can allow an attacker to exploit poor controls and gain access to sensitive information. In Web Application Penetration Testing: Session Management Testing, you’ll learn how to find those vulnerabilities before the bad guys do. First, you'll explore cookies, what to look for during a pen-test, and how you can brute force your way passed the login prompt. Next, you'll learn how easy it can be to hijack someone else's session with session fixation. Finally, you’ll discover what session puzzling is and how to leverage it as an attacker. When you’re finished with this course, you'll have a solid understanding of what to look for while penetration testing session management.

Table of contents

About the author

Clark Voss - Pluralsight course - Web Application Penetration Testing: Session Management Testing
Clark Voss

Clark holds an Offensive Security Certified Professional (OSCP) certification and is currently part of the uTest.com security team and is part of Synack.com's red team, participating in finding security vulnerabilities.

More Courses by Clark