Hacksplaining
FeaturesLessonsEnterpriseThe BookOWASP Top 10PCI Compliance
Sign Up
Log In
FeaturesLessonsEnterpriseThe BookOWASP Top 10PCI Compliance Sign Up Log In

Weak Session IDs

It is important that your session IDs are generated by a strong random number algorithm, and are of sufficient length to be unguessable. Let's see how easy it is for a hacker to get into your site if your session IDs are weak.

The PACMAN ghost guessing session IDs.
Lessons
Glossary
Terms and Conditions
Privacy Policy

© 2026 Hacksplaining Inc. All rights reserved. Questions? Email us at support@hacksplaining.com