• Info
• Initial State
• View Source
• Run

Maintaining Session State in a VSP Application

VS-U-3 Basics

Cookie example

Preliminaries

• The cookies can be used to keep session id between two HTTP requests.
• If the target browser can work with cookies, this method can be used instead of URL poisoning.

Session state in a cookie example

• On login or register, the set-cookie header writes a new session id.
• The authentication function extracts the cookie value from the HTTP header.
• If the session id is not valid, then the browser is redirected to the login page.
• The post processing function is the same as in URL poisoning example.