Session Hijacking Category

blog
3+ Note
Focus
OSCP · Red Team
Structure
Recon → Exploit

Session hijacking blog

Filters

  • Evilginx 3: AiTM Phishing and MFA Bypass for Red Teams
    web hacking

    Evilginx 3: AiTM Phishing and MFA Bypass for Red Teams

    Learn how Evilginx 3 enables AiTM phishing, captures post-MFA cookies, and helps red teams understand MFA-bypass risks in Microsoft 365.

    Discover more Discover more
  • Memcached Port 11211: Pentest and Data Dump 2026
    networking

    Memcached Port 11211: Pentest and Data Dump 2026

    Memcached opened without authentication: dump session token, credentials, and JWT with nc. 51.000x UDP amplification, cache poisoning, and hardening explained.

    Discover more Discover more
  • Session Hijacking: Cookie Theft, XSS and Session Fixation in Web Apps
    web hacking

    Session Hijacking: Cookie Theft, XSS and Session Fixation in Web Apps

    Session Hijacking in web pentesting: cookie theft via XSS, session fixation, HTTP sniffing and account takeover. HttpOnly, Secure and SameSite flag analysis.

    Discover more Discover more