---
title: "Discussion on \"Weak Session IDs in DVWA\" | Hashnode"
description: "Discussion on \"Weak Session IDs in DVWA\". Documented penetration test of the Weak Session IDs module in DVWA."
url: "https://hashnode.com/posts/weak-session-ids/69dbd278aadf1107e20a5a1d"
---

[Feed](https://hashnode.com/feed) /

Discussion

# [Weak Session IDs in DVWA](https://pentesting-dvwa.hashnode.dev/weak-session-ids?utm_source=hashnode&utm_medium=feed)

Documented penetration test of the Weak Session IDs module in DVWA.

Apr 12 · 16 min read · pentesting-dvwa.hashnode.dev  
Updated May 12  
Read the article

-   [#wiktoria-blomgren-strandberg](https://hashnode.com/tag/wiktoria-blomgren-strandberg)
-   [#cybersecurity](https://hashnode.com/tag/cybersecurity)
-   [#ethicalhacking](https://hashnode.com/tag/ethicalhacking)
-   [#ethical-hacking](https://hashnode.com/tag/ethical-hacking)
-   [#dvwa](https://hashnode.com/tag/dvwa)
-   [#pentesting-dvwa](https://hashnode.com/tag/pentesting-dvwa)
-   [#cia-triad](https://hashnode.com/tag/cia-triad)
-   [#owasp-top-10](https://hashnode.com/tag/owasp-top-10)
-   [#pentesting](https://hashnode.com/tag/pentesting)
-   [#penetration-testing](https://hashnode.com/tag/penetration-testing)
-   [#kali-linux](https://hashnode.com/tag/kali-linux)
-   [#attack](https://hashnode.com/tag/attack)
-   [#cyber-kill-chain](https://hashnode.com/tag/cyber-kill-chain)
-   [#web-application-security](https://hashnode.com/tag/web-application-security)
-   [#virtual-machine](https://hashnode.com/tag/virtual-machine)
-   [#vulnerability-assessment](https://hashnode.com/tag/vulnerability-assessment)
-   [#web-security](https://hashnode.com/tag/web-security)
-   [#virtualbox](https://hashnode.com/tag/virtualbox)
-   [#secure-coding](https://hashnode.com/tag/secure-coding)
-   [#authentication-failure](https://hashnode.com/tag/authentication-failure)
-   [#md5](https://hashnode.com/tag/md5)
-   [#unix-timestamp-converter](https://hashnode.com/tag/unix-timestamp-converter)
-   [#timestamp](https://hashnode.com/tag/timestamp)
-   [#hashing](https://hashnode.com/tag/hashing)
-   [#developer-tools](https://hashnode.com/tag/developer-tools)
-   [#application-security](https://hashnode.com/tag/application-security)
-   [#weak-session-ids](https://hashnode.com/tag/weak-session-ids)
-   [#predictable-session-ids](https://hashnode.com/tag/predictable-session-ids)
-   [#cookies](https://hashnode.com/tag/cookies)
-   [#weak-session-ids-in-dvwa](https://hashnode.com/tag/weak-session-ids-in-dvwa)
-   [#session-management](https://hashnode.com/tag/session-management)
-   [#sessionhijacking](https://hashnode.com/tag/sessionhijacking)
-   [#authentication-vulnerability](https://hashnode.com/tag/authentication-vulnerability)
-   [#session-prediction](https://hashnode.com/tag/session-prediction)
-   [#cvss-v4](https://hashnode.com/tag/cvss-v4)
-   [#secure-session-management](https://hashnode.com/tag/secure-session-management)
-   [#securecookies](https://hashnode.com/tag/securecookies)
-   [#httponly](https://hashnode.com/tag/httponly)

## Written by

[Wiktoria Blomgren Strandberg](https://hashnode.com/@wikipedia01)

@wikipedia01 · Sweden

  
[View profile](https://hashnode.com/@wikipedia01)

Master's student at the University of Skövde in Privacy, information security and cybersecurity

## Responses

Markdown supported · ⌘↵ to post

No responses yet.