Network Level Session Hijacking

Question 1

Explain Blind Session Hijacking

Answer 1

Attacker guesses next session id

Question 2

Explain UDP Session HIjacking

Answer 2

Sending UDP packets to the host which may not be validating the source

Question 3

Explain TCP Session Hijacking

Answer 3

ARP cache poisoning to MITM attack, intercept and take over the session by redirecting the packets with tool such as shyjack

Question 4

Parameters for RST Session Hijacking

Answer 4

• Ack numbers
• source port
• destination port
• IP
• sequence numbers

Question 5

MITM Packet Sniffing

Answer 5

Identifying username, password, and/or session id info from transmitted packets