Skip to content

Explain why a tester may need an authenticated session cookie when testing a protected application page with SQLMap, and identify what information the cookie represents in the lesson's workflow.

Answer

A protected page may require the web application to recognize a logged-in session. The session cookie is supplied with the test request so the application can associate it with the authenticated session. The lesson instructs students to obtain their own cookie from the browser's developer tools and not copy another person's cookie.

Explanation

### What a good answer covers - Explain that protected pages may require an authenticated session. - State that the cookie helps the application associate a request with that session. - Connect the cookie to the browser developer-tools workflow in the lesson. - Note that students must use their own session information in an authorized lab. ### Terms - **Session cookie**: browser data used by an application to recognize a session. - **Authenticated session**: a session in which the application has verified a user's identity. - **SQLMap**: a tool used to test for SQL injection flaws. ### Remember A test request may need the same authorized session context as a browser request.

Related Questions

Want to practice more questions like this?

Join myBenkio free and practice past questions for your Nigerian university courses with AI explanations for every answer.

Start Practicing Free