Create 11-Testing_for_Simultaneous_Sessions

[0xmaximus]

This PR fixes #1110.

• This PR handles the issue and requires no additional PRs.
• You have validated the need for this change.

What did this PR accomplish?

Adding "Test for Simultaneous sessions" in Session Management Testing.

[kingthorin]

I'd suggest adding this to 01 or 08.

[0xmaximus]

I can work on it, but I think we should care about how big 01 section must be. Also, section 08 might not be the best place to include this information.
The main goal of this section is to ensure users are aware of malicious behaviors by receiving log-out notifications or alerts. Also, adding this to other sections will miss other ideas like implementing a dedicated page to display and enable the termination of active sessions in remediation part.

[kingthorin]

Okay, I'll wait for a few others to chime in with their thoughts.

[0xmaximus]

Should I tag someone?

[kingthorin]

Nope, just give it a few days, they should get GitHub notifications. If they don't add their thoughts I'll hit them up out of band.

[rbsec]

I think that this would make more sense in its own section - it could be squeezed into 01 or 08, but doesn't really seem to fit too well there.

[rbsec]

Generally looks good, and it's a useful check to add. I'm always a bit twitchy about this issue though, because it's something that can often be indiscriminately reported regardless of whether it's actually a security issue in the context of the application - so I think some guidance around that might be useful.

[ThunderSon]

@0xmaximus can you please have the file extension? .md
It's currently without an extension

As for the file location, I'm okay with this being its own file.
I'll give this another look by EOW, looks good from a first look, probably won't be big/major comments, rbsec seems to have done the heavy lifting 😉

Thank you for taking care of this PR!

[kingthorin]

It will need to be linked appropriately in the section index and overall.

[0xmaximus]

I would appreciate it if any other potential issues are mentioned.

[kingthorin]

Still needs to be linked in the various indexes.

[0xmaximus]

Still needs to be linked in the various indexes.

If I understand you correctly, I should modify these files and add new link:
checklists/checklist.md
document/4-Web_Application_Security_Testing/06-Session_Management_Testing/README.md
document/README.md
checklists/checklist.json
Also, Should I modify them in separate PRs?

[kingthorin]

Don't worry about the checklists they're generated. There should be 3 READMEs. This PR.

[kingthorin]

Getting close