Attackers steal session tokens (from cookies or intercepted traffic) to impersonate authorized users.
Why it matters:
- Can give attackers access to accounts without knowing passwords.
- Common on sites without proper session security.
Pro tip: Use HTTPS, short session lifetimes, and secure cookie flags.
« Back to Glossary Index