From 1a319a22f64a4e37e6db799574fb63f484ec3c1e Mon Sep 17 00:00:00 2001 From: Lucas Date: Tue, 15 Oct 2024 23:00:49 +0200 Subject: [PATCH] Remove redundant section in privilege escalation document --- .../03-Testing_for_Privilege_Escalation.md | 4 ---- 1 file changed, 4 deletions(-) diff --git a/document/4-Web_Application_Security_Testing/05-Authorization_Testing/03-Testing_for_Privilege_Escalation.md b/document/4-Web_Application_Security_Testing/05-Authorization_Testing/03-Testing_for_Privilege_Escalation.md index 3e62b85f1..5f0f6c313 100644 --- a/document/4-Web_Application_Security_Testing/05-Authorization_Testing/03-Testing_for_Privilege_Escalation.md +++ b/document/4-Web_Application_Security_Testing/05-Authorization_Testing/03-Testing_for_Privilege_Escalation.md @@ -184,10 +184,6 @@ For example: startswith(), endswith(), contains(), indexOf() ``` -### Weak SessionID - -Weak Session ID has algorithm may be vulnerable to brute force attack. For example, one site is using `MD5(Password + UserID)` as sessionID. Then, testers may guess or generate the sessionID for other users. - ## References ### Whitepapers