Session hijacking, also known as cookie hijacking, is the exploitation of a valid computer session to gain unauthorized access to information or services on a computer system. An attacker steals a victim's authentication cookies or session keys, whether by intercepting them in transit through an intermediary computer or by copying them from the victim's device, and then uses techniques such as pass the cookie to impersonate the victim and access accounts and services without ever needing the actual password.
Facts
Classification
Offense GradeMinor or Summary Offense 1 Violent or Non-Violent Connections
Sources
1. Session hijacking (Wikipedia)
Lead paragraph
In computer science, session hijacking, sometimes also known as cookie hijacking, is the exploitation of a valid computer session-sometimes also called a session key-to gain unauthorized access to information or services in a computer system.
In Group: Hacking, Intrusion and Data Breach, Lead sentence
In computer science, session hijacking, sometimes also known as cookie hijacking, is the exploitation of a valid computer session-sometimes also called a session key-to gain unauthorized access to information or services in a computer system.
View the SourceReader Challenges (0)
No disputes yet. Spotted an error or a better source? Open the first one.
Sign in to dispute this or suggest a correction.