1
vote
I'm testing an app that uses only v4 UUIDs as a cookie for authentication. What are some attacks I can try?
A correctly generated v4 UUID is always cryptographically random, that's in the spec. Verifying this, short of looking at the source code, is difficult. There are tests you can run (e.g. Burp Suite's &...
- 38.7k
Only top scored, non community-wiki answers of a minimum length are eligible