{"id":23706,"date":"2013-05-14T11:59:43","date_gmt":"2013-05-14T06:29:43","guid":{"rendered":"http:\/\/vskills.in\/certification\/tutorial\/?p=23706"},"modified":"2024-04-12T14:17:26","modified_gmt":"2024-04-12T08:47:26","slug":"session-hijacking","status":"publish","type":"page","link":"https:\/\/www.vskills.in\/certification\/tutorial\/session-hijacking\/","title":{"rendered":"Session Hijacking"},"content":{"rendered":"

Certify and Increase Opportunity.<\/span>
\nBe <\/span>
\nGovt. Certified E-Commerce Professional
\n<\/span><\/a><\/p>\n

Session Hijacking<\/p>\n

Session<\/strong><\/p>\n

A session refers to temporary information interchange between two devices like logging into a web based email from Google, is actually participating in a session of data transfer between the Google\u2019s server and end user for working on the e-mail account. Session is created and destroyed as per need and fulfillment as in web based e-mail, logging into and logging out refers to it.<\/p>\n

Two devices have to negotiate common communication parameters for communicating on a network which is accomplished by a three-way handshake process in TCP\/IP based networks. Devices utilize a session token or a sequence number amongst them.<\/p>\n

Session Hijacking<\/strong><\/p>\n

Session hijacking is taking over an active TCP \/IP communication session without either user’s permission or knowledge. When implemented successfully, attackers assume the identity of the compromised user, enjoying the same access to resources as the compromised user.<\/p>\n

Session hijack attacks are usually waged against users that are members of large networks containing a number of open sessions. Network protocols like FTP, Telnet, and rlogin are attractive for such attacks to the attacker, because of the session oriented nature of their connections and they do not implement any security during logon, authentication, or data transmission.<\/p>\n

Session Hijacking Types<\/em><\/span><\/p>\n