Bob is going to perform an active session hijack against Brownies Inc. He has found a target that allows session oriented connections (Telnet) and performs the sequence prediction on the target operat

Taking over the session is the final stage of the attack and cannot occur until sequence numbers have been correctly guessed and a party has been taken offline.

Reverse sequence prediction is not a recognized or defined step in the TCP session hijacking methodology.

In TCP session hijacking via sequence prediction, after identifying an active session, the attacker must guess or predict the correct TCP sequence numbers so that injected packets are accepted by the server as legitimate in-sequence data. Without valid sequence numbers, forged packets are discarded by the TCP stack. Only after this step can the attacker desynchronize a party and take over the session.

Taking one party offline (desynchronization) is performed after sequence number prediction succeeds, not before, because the attacker needs valid sequence numbers to inject traffic first.