An attack that steals someone else's session information to impersonate them.
An attack that obtains a session ID through eavesdropping or guessing, then impersonates the legitimate user to operate a service.
© 2026 ITBGM