All geek questions in one place

Session replay vs session commit vs session hijack

Hi guys, can anyone make a clear difference between session fixation, session retry and session capture attacks, I read a lot of articles, but the question is still not clear between session capture and re-session attacks .....

Thanks in advance

+4
source share
1 answer

Both commit and capture ultimately have one and the same goal - to gain access to the session. They differ only in how you achieve it.

- , cookie. ( MITM), , .

, - cookie . , , -, cookie , , , , cookie, , . , , , - , .

Replay ...

cookie ( ), cookie , .
( cookie ). , , .

. "cookie cookie" , , , , .

:

  • TLS (HTTPS) MITM , , . Secure , (.. https://).
  • HTTPOnly cookie, , , JavaScript cookie. JS cookie, , ( ), .
  • , (, , - ), . .
  • cookie , , .
+3

Source: https://habr.com/ru/post/1676222/

More articles:


All Articles