How-To - Perform Session Riding Test

Session riding is about forcing an unknowingly user to execute unwanted actions on a web application in which he is currently authenticated. The way this is accomplished relies on the following facts :

• web browser behavior regarding the handling of session-related information such as cookies and http authentication information;
• knowledge of valid web application URLs on the side of the attacker;
• application session management relying only on information which is known by the browser;
• existence of HTML tags whose presence causes immediate access to an http[s] resource; one of such tags is the image tag img.