Session Hijacking

The exploitation of a valid web session by stealing or predicting the session token that authenticates a user. Attackers obtain session IDs through XSS, network sniffing, or brute force. Once they have a valid token, they impersonate the victim without needing their password.

Definição editorial da DecipherU. Para definições técnicas autoritativas, consulte NIST, ISO, ou o órgão normativo correspondente.