Session Hijacking
Named by 6 kept items in this workspace.
4 items name it under techniques and 2 under classification.key entities.
Search every workspace for Session Hijacking. It matches the name as written, so it can find other things that share it.
The items that name it 6
The injected drainer took over logged-in user sessions for about an hour, dumping or moving positions and moving cash out.
Described as a post-authentication attack in which attackers take over authenticated sessions, so strong authentication does not prevent it.
The script checks whether a visitor is logged into Polymarket and uses their existing authenticated trading session and the platform's trading functionality to make unauthorized transactions.
Module topic covering session hijacking techniques
All techniques in this workspace.