What is it

Session hijacking is a cybersecurity attack where an attacker takes control of a legitimate user’s active session by obtaining the session identifier. This allows the attacker to impersonate the user and perform actions on their behalf without needing their login credentials.

Why i Like This

There are several reasons that make it effective and hackers love this some of these are use don’t get notification at all even It bypass 2FA that make it one of the finest thing i ever perform.

How Does Hackers Perform it

There are several ways to perform this some of them are

HERE ARE A DEMO

Suppose u want to hack your friend account who logged their account in school lab you just need to press F12 or Ctrl+Shift+S to open Inspect tool and navigate to STORAGE Section if you are using Firefox & for chrome u need to go to Session where u find some details like this one.

From Here you need to just copy their session ID and Paste it in YOURS Boom Now it's time to do your own stuff.

---