Glossary
Session Hijacking
An attack in which an adversary takes over a valid, already-authenticated user session, typically by stealing a session cookie or token, to impersonate that user without needing their password. It is often carried out through cross-site scripting, network sniffing on unencrypted connections, or malware.