Pentesting ASP.NET Cookieless Sessions with Burp
ID: 3687a8ac-b983-5701-a3de-c92b0d2484c6
STIX ID: report--3687a8ac-b983-5701-a3de-c92b0d2484c6
Feed Name: Black Hills Infosec Blog
The report outlines a practical Burp Suite configuration to normalize ASP.NET cookieless session tokens, enabling clean site maps and reliable spider/scanner operation. It details a two-proxy chain with Match/Replace rules and session macros to extract, move, and reinject tokens, and notes limitations such as short-lived placeholder parameters and minor sitemap noise.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.