Session Mgmt — Administrative Portals

“Wait… did I just promote myself by editing Local Storage?”

By using this checklist, you can test important areas like session tokens, cookies, logouts, and timeouts in a clear and structured way.

When you log in to your favorite website whether it’s your bank, email, or even Netflix, the site creates something called a session. This…

Task 1 Introduction

Have you ever logged out of your company’s email, only to realize you’re still signed into your internal chat application? This common…

Authentication is the gatekeeper of every web application.  When it’s weak or poorly implemented, attackers don’t need to break in — they…

If the term session seems foreign, you’re likely focused on mobile applications using stateless APIs. In that modern model, every API…

If you frequently log into services online, you likely browse many different websites and occasionally forget to click the Logout button…

A High-severity flaw (CVE-2024-21635) in Memos fails to invalidate Access Tokens upon password change, allowing attackers to maintain access to the knowledge base. Update to v0.25.2.