Session Hijacking When you log in, the service opens a session — a state that remembers you are you, together with everything that goes with it, such as your preferences and sett …

Cross-Site Request Forgery … fact that a browser automatically sends existing session cookies to a site where the user is already logged in. The attacker does not need to know the password …

Infostealer … credentials. Saved browser passwords, cookies and session tokens, autofill data, crypto wallet keys — all of it is of interest. It stays in contact with the att …

Cross-Site Scripting … ter. Carried out in the right place, it can cause session theft, account takeover or a covert way into a business application.

Path Traversal … erable VPN or network device allows files holding sessions or credentials to be read through path manipulation.

QR phishing - Quishing … places. The attack is simple: the user moves the session out of a controlled business environment onto a personal phone themselves.

Shared Account Abuse … hnical limitation, the access belongs behind PAM, session recording and credentials issued for a limited time.