Session fixation and invalidation
Lab 10 / 13 · Return to Arena
Welcome to this intentionally vulnerable training application.
Objective: Session fixation and invalidation. Inspect requests and responses with Burp Suite or browser developer tools. Use only the synthetic accounts and data supplied here.
Do not attack the arena portal or any system outside this lab.
Starting point: Trace session IDs across login/logout
Log in as demo user · Account · Log out
Authorized training only · synthetic data · lab 10