Skip to content
← LibraryTechnique entry
W-COOKIE-WEAKCredential Access

Weak / Predictable Session Cookie

Sequential / time-based / weakly hashed session IDs allow prediction or rotation of valid sessions.

§ Where this technique fits

W-COOKIE-WEAK is catalogued under the Credential Access tactic of the offensive-security kill-chain. It appears in 0 approved dossiers in the registry, typically.