Good Day Everyone
One of our IT security requires us to clear the Session ID on the server side when our web application under go a penetration testing. we put the code below:
Session.Abandon();
Response.Cookies.Add(new HttpCookie("ASP.NET_SessionId", ""));
but it said that we have to clear also the Session ID on the server side to prevent us from Session Replay or Session Hacking.
does anyone has a code for this or how to clear it on the server side? we don't have a idea on where we can find the created session id on the server side,.
Thanks and regards Everyone.
Go to the complete details ...