Recent Articles
How cookie Stealing Hack Works : Basic about Session Hijacking


Well I have posted lots of articles on Phishing and keylogging, but today I would like to throw some light on a very useful method which hackers use to hack gmail, facebook and other email accounts i.e. cookie stealing and session hijacking.
What is a Cookie?Cookies are small files that websites put on your computer when your browser accesses a website that uses cookies. cookies are used to to keep track of your movements within the site, help you resume where you left off, remember your registered login, theme selection, preferences, and other customization functions.
Whenever we sign into an account it generates a unique piece of string. One copy is saved on server and other in our browser as cookie. Both are matched every time we do anything in our account.
Cookies allow you to proceed through many pages of a site quickly and easily without having to authenticate or reprocess each new area you visit.
Example of cookie:
- Have you ever put something in a virtual shopping cart in an online store and then returned a few days later to find that the item is still there? That's an example of cookies at work.
- When you login on gmail or facebook, you need to give ur username and password only once, but after that each time when u navigate from one page to another, it redirect you without asking for those information(username and password) asked before.
Types of cookies:
- session cookies: Session cookies are created temporarily in your browser's subfolder while you are visiting a website. Once you leave/sign out from the site, the session cookie gets deleted.
- Persistent Cookies: Persistent cookie files remain in your browser's subfolder and are activated again once you visit the website that created that particular cookie. A persistent cookie remains in the browser's subfolder for the duration period set within the cookie's file.
What is a cookie stealing and Session Hijacking ?"A session hijacking attack is basically an act of stealing stored session cookies and injecting it into your own browser to gain access to victims account."
In this procedure, an attacker can steal session cookies by convincing slave to run a piece of code in browser (normally any java script ) or by any how ask slave to visit to any link that have session stealing php script . As soon as Victim do that, attacker gets his session cookies. Now Attacker can use this stolen session to login into slave's account without providing any username/password. This attack is very uncommon because when the slave clicks 'Sign out', session gets destroyed and attacker too also gets signed out.
But in case of some sites that use persistent cookies attacker doesn’t get signed out when slave clicks 'Sign out'. In destroy session automatically after any particular time. for Ex. Yahoo, it destroy cookies after 24hrs But if user simply refreshes the windows in yahoo account with in 24 hrs, then he gets sessions again for next 24 hrs. This means, once the yahoo account session is stolen, attacker can access the account for life time by refreshing window in every 24hrs.
How the stealing process work?
1. The attacker creates a PHP script and uploades it to any webhosting site.
2. The attacker then asks the slave to visit that particular link containing the PHP code.
3. Once the slave visits it his/her authentication cookie is saved in a .txt file.
4. Next the attacker uses a cookieinjector or a cookie editor, and replaces his own cookies with the victims cookies as a result of which the victims session is hijacking, and he got access to victim's account.
Well, this all was the theory About Cookie Stealing and how it works, in my next post i will explain how you can done all this practically....
Keep on Visiting or You can subscribe below to get updates in your inbox... ;)
If you want more hacking tutorials, check out other posts under category Hacking.


8 comments for this post
Leave a reply
Subscribe to:
Post Comments (Atom)
TechByte4U on Facebook
Popular Posts
Windows Genuine Notifications is a problem that every computer operator faces in her life. It notifies you if a copy of Windows XP is not ge...
In this Tutorial i m giving detail description about a firefox Addon Flash and video Download about which i have also told in my last...
last week a person requested here to explain how to make a fake login page of Facebook.. So i am giving a lesson here about making fake ...
Login as administrator Administrator password can be changed easily without knowing its password. Thing needed is just access to that co...
You have no more need to read the long Pdf files line by line. Now feel free, coz your pdf will read out itself for you. Many peo...
These days I spend most of the time with books and laptop in reading and learning new things. A week ago I downloaded an e-book named The H...
Hack Google plus I hope till now all of you know what is google plus, so i am not going to write more about Google plus here. If yo...
In response to query asked by Ameer Hasan Malik Did you forget your windows login password? or want to access Admin account in schoo...
If the partition is deleted, your vital and important data stored on those partitions may become inaccessible which may create many har...
Hello Friends, Gmail and Yahoo don't have facility to add Animated signature and even in gmail you can't add html signatures al...
Ashish Kulshrestha
July 11, 2011 at 5:52 AM
Thnx for sharing .. such a wonderful information :)
Unknown
July 11, 2011 at 9:27 PM
Can u give me the php script for stealing cookies
Surbhi Verma
July 11, 2011 at 9:39 PM
hi Mak... i will write about it in other post soon, please have some patience and keep reading articles here...
thanks :)
@Ashish... thx dear :)
dhananjay
July 12, 2011 at 10:05 AM
Curiously waiting for the next post!!!
dhananjay
July 12, 2011 at 10:06 AM
Curiously waiting for the next post! :)
Surbhi Verma
July 12, 2011 at 10:37 AM
@Dhananjay ...
Thx for showing ur interest, will try to write next post today :)
dhananjay
July 14, 2011 at 3:22 PM
Well...Thanx in advance for that :)
Bhagat Singh Bisht
April 25, 2012 at 12:00 PM
Dear Surbhi,
All your posting are really nice one keep such posting. I really liked
Thanks
Bhagat Singh Bisht