Tools

Broken Authentication Via Cookie Manipulation

References

  1. OWASP Foundation, Authentication Cheat Sheet, OWASP, 2023. [Online]. Available: https://cheatsheetseries.owasp.org/cheatsheets/Authentication_Cheat_Sheet.html

  2. OWASP Foundation, Session Management Cheat Sheet, OWASP, 2023. [Online]. Available: https://cheatsheetseries.owasp.org/cheatsheets/Session_Management_Cheat_Sheet.html

  3. PortSwigger Web Security Academy, Authentication vulnerabilities, PortSwigger, 2023. [Online]. Available: https://portswigger.net/web-security/authentication

  4. MITRE, CWE-565: Reliance on Cookies without Validation and Integrity Checking, Common Weakness Enumeration, 2023. [Online]. Available: https://cwe.mitre.org/data/definitions/565.html