Session Hijacking Attack | Session ID and Cookie Stealing | SideJacking

#session_hacking #sidejacking #xss

Understanding Session Hijacking, also called side-jacking, is important for web developers, aspiring security engineers, and Internet users in general. Session Hijacking is a technique hackers use to steal session IDs to gain access to private systems and personal accounts to enjoy and take advantage of advanced privileges. Session Hijacking allows attackers to penetrate vulnerable systems by stealing the IDs of users to perform privileged actions taking advantage of the trust between the victim's browser and the system. Social engineering techniques are used to get the victim to click a link or submit a form that will open the door for the attacker to perform malicious actions.

In this video, I explain Session Hijacking by starting with a typical scenario of a seemingly different but very similar case. The story will help you get a general idea. Then we dive deeper into what exactly a session is, what is session hijacking, how it works, types of session hijacking attacks, and ways to defend against these types of attacks.

--------- Video Outline ---------

00:00 Understanding the danger
01:45 Understanding Sessions and How They Work
03:45 Session Hijacking
05:43 Types of CSRF Attacks and How They Work
10:55 How to defend against CSRF Attacks

Check out more of The TechCave Videos:

Stay Tuned!

[hanhmy]

*bro you're good at explaining in simple terms*

[comosaycomosah]

these videos are great bro and just really well made was surprised it wasn't a company or any website or anything as well as no videos in forever

[anasssoulimani]

Informative and entertaining as always ❤

[rahatsshowcase]

excellent content! Keep bringing up these attacks and their solves
!

[misssg]

Great explanation! Thank you so much!!

[fuballplanet]

Hi, you have such a amazing way to simplify things thanks from algeria

[macxoaries]

explained in simple terms very good indeed

[GodfreyMann]

These defensive techniques can only be implemented on the server side…they’re of no use to a user.

Best tip for users are: (a) avoid public wifi i.e. use mobile data; (b) if using public wifi then use a VPN; (c) logout of all sessions - don’t just close the browser tab;

…any other tips?

[blackball]

Nowadays almost every websites uses https, then what’s the point of this video of its so outdated?(just asking)

[antwanwimberly]

Use http only at the cookie level and SSL

[hoasada]

Am here to learn more because my beloved Youtuber have his channel stolen due to this kind of attack. Your videos are very informative and I would definitely want to learn more about cyber security from you !