The Web Application Hacker’s Handbook Discovering and Exploiting Security Flaws

is vulnerable to session fixation. 

■

If the application uses HTTP cookies to transmit session tokens, then it

may well be vulnerable to cross-site request forgery (XSRF). First, log in to

the application. Then confirm that a request made to the application but

originating from a page of a different application results in submission of

the user’s token. (This submission will need to be made from a window of

the same browser process as was used to log in to the target application.)

Attempt to identify any sensitive application functions all of whose para-

meters can be determined in advance by an attacker, and exploit this to

carry out unauthorized actions within the security context of a target user.

See Chapter 12 for more details on how to execute XSRF attacks.