Welcome back to our video lecture in this lecture we will see that what are Session ideas sessions are
set aside storage information which is presenting a user is interacting with that.
But the question how that information is stored on the server what kind of information it is information
which is stored on a server when the user is interacting with that web application is in the form of
session.
It's what our system is session id is a piece of data that is used in network communications to identify
a session in a series of letter and message exchanges session identifiers become unnecessarily in cases
where the communications infrastructure uses is stateless protocol such as DP session id is a long random
alphanumeric string which uniquely identifies users on that website means every single user contains
different nationalities and how that certain ideas are derived depend upon the world location logic.
Sometimes what happens is the session IDs are also stored inside the cookies.
The important characteristics of this tonight is is fast one session should be random.
And the second one is session should be long and it should be alphanumeric in the previous video we
have learned about cookies and sessions.
So let's talk about difference between the these S.A. and cookies.
Cookies is stored on blindsight by the browser and the sessions are stored on server side.
So in the case we can see the data which is inside the cookie in the form of name and value pairs where
as the session id is we can see or data so that the session is secure whereas the keys are not secure
and it can be stolen by the javascript techniques.
Let's see how to use Batsuit in order to find the session areas is
let up on the site.
You can see that the request is request you again see the some different kind of cookies.
You read this request.
Here is an addition information card as this recession really we can't say that this is a session ID
because it is based recessionary.
So this is how this 90 looks like a long random string and alphanumeric string in the most of obligation.
If I talk about Google Facebook or Twitter etc. If you intercept the request youll find lot of details
containing this kind of different ideas.
If there is return exquisite instead of page with session ID then you can just think of that how difficult
it is to analyze that what our session is among these all of the finding the right way with an ID or
any other session IDs.
Is also very tricky task.
That said in this video lecture 0 in the next plus.