Madhnw0rm.com - Information About Cyber Security Awareness: Session Hijacking

<div dir="ltr" style="text-align: left;" trbidi="on">
Session Hijacking  
 
Session hijacking refers to the exploitation of a valid computer session, wherein an attacker takes over a session between two computers. 
 
 
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjChSmuxvDVUyU60Of1lxRVDMGS35yc3TcgsYvLhlh2QuvLLmlEU5nZmMNlS8s2lI0k_xtWu-TTa-pEtmVkzNJ_C4Gv0lPpgxt7cSTD24czkegWqWQudH_ZBSCE0G_XxzrjwjfYAdJGAUbc/s1600/Session+Hijacking.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="Session hijacking refers to the exploitation of a valid computer session, wherein an attacker takes over a session between two computers." border="0" height="225" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjChSmuxvDVUyU60Of1lxRVDMGS35yc3TcgsYvLhlh2QuvLLmlEU5nZmMNlS8s2lI0k_xtWu-TTa-pEtmVkzNJ_C4Gv0lPpgxt7cSTD24czkegWqWQudH_ZBSCE0G_XxzrjwjfYAdJGAUbc/s400/Session+Hijacking.jpg" title="Session Hijacking" width="400" /></a></div>
 
 
Overview of session Hijacking 
 
Session hijacking refers to the exploitation of a valid computer session where an attacker takes over a session between two computers the attackers steals a valid session id, which is used to get into the system and sniff the data 
 
An attacker takes over a TCP session between two machines,since most authentication occur only at the start point to gain access to a machine. 
 
 
What is Session Hijacking ? 
 
Session hijacking refers to the exploitation of a valid computer session where an attacker takes over a session between two computers,The attacker steals a valid session id which is used to get into the system and snoop the data,In TCP session hijacking,an attacker takes over a TCP session between two machines,since most authentication only occurs at the start of a TCP session,this allows the attacker to gain access to a machine 
 
 
 
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhuDBlzKYXA9eo2OnYXhU2Js4cb6J0Y7UBS2A1oobJ_SS9eauSUgM55O8iW39LtcOP88XYIaX5dR2tsO4vvIE8gJJ_VMFnsiSUgUPsGamQBPs7ujumI7ooOAyZEtqsAfggsxJbKm2WTI-cG/s1600/Brute+force.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="Session hijacking refers to the exploitation of a valid computer session, wherein an attacker takes over a session between two computers." border="0" height="225" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhuDBlzKYXA9eo2OnYXhU2Js4cb6J0Y7UBS2A1oobJ_SS9eauSUgM55O8iW39LtcOP88XYIaX5dR2tsO4vvIE8gJJ_VMFnsiSUgUPsGamQBPs7ujumI7ooOAyZEtqsAfggsxJbKm2WTI-cG/s400/Brute+force.jpg" title="Brute force" width="400" /></a></div>
 
 
Dangers Posed by Hijacking 
 
 
<ul style="text-align: left;">
<li>Most counter measures do not work unless you use encryption</li>
<li>Threat of identify theft,information loss,fraud,etc,..</li>
<li>Hijacking is simple to launch</li>
<li>Most computers using TCP/IP are vulnerable</li>
<li>You can do little to protect against it unless you switch to another secure protocol</li>
</ul>
 
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEigKuFECf5RL55XLyWqYuZdKPj-hIUA3-MmE1jbQa8-_PHQdxZ4pbhAFFZO6xJFAgQOmnJiHTP_jIjrefH22llEM_LH7nKwE_z3SXKg1dCe6nSVug8KeaMW-szrs4KLTC9TRIMLsaoaSxKT/s1600/encryption.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="Session hijacking refers to the exploitation of a valid computer session, wherein an attacker takes over a session between two computers." border="0" height="400" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEigKuFECf5RL55XLyWqYuZdKPj-hIUA3-MmE1jbQa8-_PHQdxZ4pbhAFFZO6xJFAgQOmnJiHTP_jIjrefH22llEM_LH7nKwE_z3SXKg1dCe6nSVug8KeaMW-szrs4KLTC9TRIMLsaoaSxKT/s400/encryption.jpg" title="Brute force" width="225" /></a></div>
 
Key Session Hijacking Techniques 
 
Brute Forcing 
 
The attacker attempts different ids until he suceeds 
 
Calculating 
 
Using non randomly generated ids, an attacker tries to calculate the session ids 
 
Stealing 
 
The attackers uses different techniques to steal session ids 
 
 </div>

session Hijacking

Session Hijacking Session hijacking refers to the exploitation of a valid computer session, wherein an attacker takes over a session bet...