Session Security Checker

소개

The Session Security Checker skill automates the discovery of session management vulnerabilities such as session fixation, CSRF, and replay attacks within web applications. It analyzes authentication modules, middleware, and configuration files across popular frameworks like Express, Django, and Spring to validate cookie flags, rotation policies, and timeout settings. By providing a comprehensive security report with prioritized fixes and code examples, it helps developers harden their applications against unauthorized access and broken authentication according to OWASP standards.

주요 기능

• Validates cookie flags including HttpOnly, Secure, and SameSite
• Generates automated security reports with remediation code
• 0 GitHub stars
• Identifies session fixation, CSRF, and replay attack paths
• Audits session rotation and expiration configurations
• Supports multiple frameworks like Express.js, Django, and Spring

사용 사례

• Validating session management compliance with OWASP standards
• Reviewing and hardening session cookie configurations in production
• Conducting a security audit on web application authentication flows