Hacking Articles: Session Hijacking

<div dir="ltr" style="text-align: left;" trbidi="on">
<br />
<br />
<div class="separator" style="clear: both; text-align: center;">
<img border="0" height="380" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhhNYcb_NbQiv24bVY7n0MGzA__O0qP6gp7Aj4y6SyDc4NmPkY6BVvE7V9xyhw_1frmORkopRpaDn7WopR8kelj3nFcM0vhWK4WfBSP6Q19LLH9Jdu39Dw5co0BgKq-fIe0Sretk9MTOuvO/s1600/session+hijacking.jpg" width="640" /></div>
<br />
<br />
Session hijacking refers to the exploitation of a valid computer session where an<br />
attacker takes over a session between two computers. The attacker steals avalid session ID<br />
that is used to get in to the system and extract the data. TCP session hijacking means taking<br />
control over a TCP session exchanged between two computers. It is carried out through source-<br />
routed IP packets. An attacker who is logged on to a system can participate in the conversation<br />
of other users on other systems by diverting packets to his orher system. Blind hijacking is<br />
another method through which responses on a system can be assumed. The man-in-the-middle<br />
(MITM) attack is another method in which a sniffer is used to trackdown a conversation<br />
between two users. Denial-of-service (DoS) is executed so that a system crashes, which leads<br />
to a greater loss of packets.<br />
Steps in session hijacking:<br />
<br />
<ul style="text-align: left;">
<li>Tracking the connection</li>
</ul>
<ul style="text-align: left;">
<li>Desynchronizing the connection</li>
</ul>
<ul style="text-align: left;">
<li>Injecting the attacker's packet</li>
</ul>
</div>

Session Hijacking Session Hijacking

Session hijacking refers to the exploitation of a valid computer session where an attacker takes over a session between two computer...