Session Hijacking

Question 1

What is a Session Management?

Answer 1

Enables web applications to uniquely identify a user across a number of different actions and requests, while keeping the state of the data generated by the user and ensuring it is assigned to that user

Question 2

What are Cookies?

Answer 2

Text file used to store information about a user when they visit a website

Question 3

What are Session (Non-Persistent) cookies?

Answer 3

Reside in memory, and are deleted when the browser instance is closed

Question 4

What are Persistent Cookies?

Answer 4

Cookies that are stored in the browser cache until they are deleted by the user or pass a defined expiration date

Question 5

What is a Session Hijacking?

Answer 5

An attacker takes over an active session between a user and a system after the user has already authenticated (often by stealing cookies, tokens, or session IDs)

Question 6

What are Session Prediction Attacks?

Answer 6

A type of spoofing attack where the attacker attempts to predict the session token to hijack a session

Question 7

What is Cookie Poisoning?

Answer 7

An attacker modifies the contents of a cookie stored on a user’s device to gain unauthorized access or escalate privileges.