Session Hijacking

The exploitation of a valid web session by stealing or predicting the session token that authenticates a user. Attackers obtain session IDs through XSS, network sniffing, or brute force. Once they have a valid token, they impersonate the victim without needing their password.

Definición editorial de DecipherU. Para definiciones técnicas autorizadas, consulta NIST, ISO, o el organismo de normalización correspondiente.