---
title: Session Attacks
description: Session attacks steal or fix a victim's session identifier, often via cookie theft, session IDs in URLs, or fixation, so the attacker can act as the signed-in user without knowing the password.
tokens: ~0
---

# Session Attacks

undefined