project-12

Project 12 – Session Hijacking

Overview

This project is about Session Hijacking. It explains the concept of Session Hijacking in a way and also includes hands-on exercises that I did in a controlled laboratory environment.

The project looks at how websites keep user sessions using cookies. It also talks about how attackers can intercept HTTP traffic using Man-in-the-Middle techniques and how defenders can find and stop these threats.

I created this repository as part of my CEH v13 portfolio to improve my knowledge of cybersecurity and my GitHub profile.

---

Objectives

• I want to understand how sessions are managed

• I want to learn how session cookies work

• I will study Session Hijacking techniques

• I will do ARP Spoofing in a lab

• I will capture HTTP cookies using Wireshark

• I will look at network traffic

• I will learn about security measures

• I will understand how to monitor for Session Hijacking attacks

---

Skills Demonstrated

• I can manage sessions

• I can analyze HTTP cookies

• I can look at network packets

• I know how to use Wireshark

• I can do ARP Spoofing

• I know about Man-in-the-Middle attacks

• I can use Linux

• I can look at browser cookies

• I can write cybersecurity documents

• I am aware of security issues

---

Tools Used

• I used Kali Linux

• I used Ubuntu Linux

• I used Firefox Browser

• I used Wireshark

• I used arpspoof

• I used Cookie Manager

• I used VirtualBox

---

Project Structure

Project-12-Session-Hijacking/

│

├── README.md

├── LICENSE

├── notes.md

└── screenshots/

---

Project Sections

Part 1

• I learned about Session Management

• I learned about Session IDs

• I learned about cookies

• I learned about Session Hijacking

• I learned about Session Sniffing

• I learned about countermeasures

---

Part 2

I did a demonstration that included:

• I logged in to TestFire

• I installed Cookie Manager

• I did ARP Spoofing

• I captured HTTP cookies using Wireshark

• I looked at traffic

• I made some observations

---

Final Summary

• I learned about key concepts

• I looked at it from a SOC Analyst Perspective

• I learned about defensive security measures

• I learned some lessons

• I concluded that Session Hijacking is important

---

Learning Outcomes

After I finished this project I got hands-on experience with:

• managing HTTP sessions

• using cookies for authentication

• capturing packets using Wireshark

• understanding ARP spoofing concepts

• understanding Man-in-the-Middle attack workflow

• learning about Session Hijacking best practices

• learning about defensive monitoring techniques

---

Disclaimer

I did this project in a controlled laboratory environment using systems that were made to be vulnerable, for educational purposes only. The techniques I used should only be practiced on systems that you own or have permission to test.

---

Author

Kranthi Kumar

I am a Cybersecurity Enthusiast and a CEH v13 student. I want to be a SOC Analyst.

I am an Aspiring Cybersecurity Professional, a CEH Student and a Linux and Security Enthusiast.

GitHub: https://github.com/kranthi778

---