Detect session-management vulnerabilities across cookie, server-side, and token-based sessions.
npx skills add https://github.com/ersinkoc/security-check --skill sc-session
Please help me install this Agent Skill. Skill: sc-session Source: https://github.com/ersinkoc/security-check/tree/main/skills/sc-session Command: npx skills add https://github.com/ersinkoc/security-check --skill sc-session
Detects session-management vulnerabilities in web applications across cookie-based, server-side, and token-based sessions.
Analyze your application's session handling to identify cookie attributes, token generation, and invalidation gaps.
High-intent search queries and answers about installing and using this skill.
Detect session management vulnerabilities by analyzing cookie attributes, token generation, and session lifecycle controls across cookie-based, server-side, and token-based sessions. This process identifies insecure cookies, improper logout, and session fixation issues.
Insecure cookie attributes to check include missing HttpOnly, Secure, and SameSite flags. Analyzing these attributes reveals improper token handling and session exposure risks that leave web applications vulnerable to cross-site scripting or interception attacks.
Verify session lifecycle controls by checking for session regeneration after login and complete invalidation on logout. This validation confirms whether token reuse and session fixation vulnerabilities exist within the web application's authentication flow.
Framework-specific remediation guidance for token handling issues is generated across major frameworks and languages. The analysis outputs structured findings with severity levels and example configurations to fix insecure session management flaws.
The best way to find improper logout behavior in token-based sessions is to analyze session invalidation gaps and token reuse during the verification phase. This detects whether active tokens remain valid after user logout.
Session analysis covers server-side sessions and token-based sessions equally, detecting vulnerabilities across both architectures. It evaluates framework-specific settings and session lifecycle controls to identify fixation, reuse, and insecure cookie exposure.
cameronapakManage Bknd user sessions with JWT-based lifecycles and auto-renewal.
flavien-iaAudit Next.js and T3 stack applications for security vulnerabilities across twelve categories.
salmanabdurrahmanValidate session lifecycle security and cookie attribute hygiene for web applications.
AcczdyAutomate web application penetration testing following the OWASP WSTG with Burp Suite.
