> ## Documentation Index
> Fetch the complete documentation index at: https://rootea.es/llms.txt
> Use this file to discover all available pages before exploring further.

# Brute-forcing a stay-logged-in cookie

> PortSwigger Web Security Academy lab: Brute-forcing a stay-logged-in cookie. Topic: Authentication Vulnerabilities.

`$ tldr` PortSwigger · Authentication Vulnerabilities

| · | · |
| - | - |
| Platform | PortSwigger Web Security Academy |
| Topic | Authentication Vulnerabilities |
| Difficulty | PRACTITIONER |
| Official lab | [Open](https://portswigger.net/web-security/authentication/other-mechanisms/lab-brute-forcing-a-stay-logged-in-cookie) |

## Solve the lab

| Language | Author | Format | Link |
| - | - | - | - |
| 🇬🇧 EN | **PortSwigger** | Texto | [Open](https://portswigger.net/web-security/authentication/other-mechanisms/lab-brute-forcing-a-stay-logged-in-cookie) |

## Resources by skill

| Skill | Source | Link |
| - | - | - |
| Authentication Vulnerabilities | PortSwigger | [Open](https://portswigger.net/web-security/authentication) |

## Related skills

[Authentication Vulnerabilities](/en/skills/authentication)

***

## Comments & tips

Solved this lab a different way? Share it here — comments live in [GitHub Discussions](https://github.com/FFuson/HTB_Writeups/discussions).

*Last updated: 2026-06-07*


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.