Publish Latest 2024-10-15 (#431)

OWASP · Oct 15, 2024 · ddd6975 · ddd6975
1 parent 1844f5b
commit ddd6975
Showing 1 changed file with 0 additions and 4 deletions.
diff --git a/...ecurity_Testing/05-Authorization_Testing/03-Testing_for_Privilege_Escalation.md b/...ecurity_Testing/05-Authorization_Testing/03-Testing_for_Privilege_Escalation.md
@@ -193,10 +193,6 @@ For example:
 startswith(), endswith(), contains(), indexOf()
 ```
 
-### Weak SessionID
-
-Weak Session ID has algorithm may be vulnerable to brute force attack. For example, one site is using `MD5(Password + UserID)` as sessionID. Then, testers may guess or generate the sessionID for other users.
-
 ## References
 
 ### Whitepapers