When a user logs into my ASP.NET application an ASP.NET_SessionId is assigned to them. This means that, potentially, an attacker could impersonate a user by using their SessionId in requests (sending the id as a cookie).
I know it is possible to get them from the server side like this, but is this possible for an attacker?
For this let's just say that my site has no XSS nor HTML injection vulnerabilities and is running on ASP.NET version 4.0.30319 and Microsoft-IIS/8.5.
How would an attacker get a hand of all active Session Id's, or a single users session id, without the obvious man in the middle and brute force attacks? Is my site secure?

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.