stompy the session stomper is a penetration
testing tool that performs an automated analysis
and runs an array of fairly sophisticated tests on
WWW session identifiers (or any other tokens) to
see whether they are reasonably unpredictable or
vulnerable to attacks.
