When a user log in to the account
it starts a session with that account and this session ends up with log
out In a running session, user is give a session id which is unique
identifier of the user for that session and is only valid for that
session.It is the type of attack in which hacker gain access to the
session id to gain unauthorized access to information or services in
this maintain on cookies.Session hijacking is simple method to hack someone id hack like as a Facebook, g mail, Hotmail,twitter etc. Session hijacking is support on cookies...
Session hijacking can be done at 2 levels:- Network level (TCP and UDP session hijacking)
- Application level (HTTP session hijacking)
TCP session hijacking
TCP session hijacking is when a hacker takes over a TCP session between two machines. Since most authentication only occurs at the start of a TCP session, this allows the hacker to gain access to a machine. It can be done by following ways.
IP Spoofing: Assuming the identity
Man in the Middle attack using Packet Sniffers
Blind attacks which involves bruteforcing of session id.
UDP session hijacking
It is similar to TCP session hijacking but easier than that because UDP does not use packet sequencing and synchronizing.
Hijacking Application Levels
In HTTP session hijacking hacker tries to get access to the session ID used in the session to identify the user. HTTP is state less so it need session ID with each request. If hacker get the session id, he can hijack the victim's session.
- XSS
- Man in the middle attack
- Bruteforcing session id
- Man in the browser attack
