Session Hijacking

Session hijacking occurs when an attacker steals or impersonates a user's valid session identifier to gain unauthorized access to web applications. This can happen through various means including XSS, network sniffing, or predictable session tokens. Prevention involves secure session management, using HTTPS, and implementing proper session timeout policies.