Which of the following can be used to perform session hijacking? Each correct answer represents a complete solution. Choose all that apply.

Question

Options

• ACross-site scripting
• BARP spoofing
• CSession sidejacking
• DSession fixation

• A
  78% (47)
• B
  22% (13)

Explanation

All three correct answers are established session hijacking techniques. Cross-site scripting (XSS) injects malicious scripts into a trusted website to steal session cookies from a victim's browser. Session sidejacking uses packet sniffing on unencrypted traffic (e.g., on public Wi-Fi) to capture a valid session token and reuse it. Session fixation tricks a victim into authenticating with a session ID pre-set by the attacker, allowing the attacker to access the session after login. ARP spoofing (B) is a man-in-the-middle network attack used to intercept traffic - it is a delivery mechanism but is not itself a session hijacking technique, which is why it is excluded from the correct answers.

No community discussion yet for this question.