Introducing Stompy: A New Tool for Internet Session ID Security Assessment

Michal Zalewski, an independent security researcher, announced the availability of Stompy, a free tool to perform a black-box assessment of Internet sessions IDs. While some session ID cookies generation algorithms are believed to be cryptographically secure, this is not the case for certain less-common enterprise web platforms.

The link for this article located at IT Observer is no longer available.