Privilege Escalation

Public preview

Want everyone on your software team to learn this? Free 14-day trial.

Train my team

When a user logs into a website, a session is often established. The browser and server exchange a session identifier, so the server knows who it is talking to with each subsequent HTTP request.

 
Headers
  ▼ General
      Remote Address: 121.232.112.200:443
      Request Method: GET
      Status Code: 200 OK
  ▶ Request Headers
  ▼ Response Headers
      Set-Cookie: session_id=142983010
      Set-Cookie: user_id=3829