PHP Session Hijack / Fixation Audit

Audits PHP session configuration, session.savepath permissions, active session files, and fixation-related ini settings from a PHP webshell session. !/usr/bin/env python3 -- coding: utf-8 -- import os import time from kittysploit import from lib.post.php.helpers import PhpPostHelper class...

Session Fixation

codeigniter/framework is vulnerable to session fixation attacks. The vulnerability exists due to the assumption that session.usestrictmode which was the default behavior of PHP 5.x...

CVE-2018-12071

A Session Fixation issue exists in CodeIgniter before 3.1.9 because session.usestrictmode in the Session Library was mishandled...

CVE-2018-12071

A Session Fixation issue exists in CodeIgniter before 3.1.9 because session.usestrictmode in the Session Library was mishandled...

CVE-2018-12071: Session Fixation

A Session Fixation issue exists in CodeIgniter before 3.1.9 because session.usestrictmode in the Session Library was mishandled...