OA04a Vectors, Projectile and Rotational Kinematics.

Comparison (Hague v Hague-Visby v Hamburg Rules).

PCOQ01 SCO104 JAN22 LG01 Globalisation AND Technology.

Tutorial 1 - Planning RIsk Assessment & Materiality.

Engineering Electromagnetics Tutorial 2 Solution.

Real Estate Development & Investment Law (GES1024).

Fundamentals Of Social Science Research (HP1100).

Management Accounting and Business (ACCT 1063).

Biochemistry and Biomaterials for Bioengineers (BN2301).

Information Communication Technology (ICT318).

Cloud Computing: Business Case and Technical Models (ICT335).

Introduction to Management Concepts and Applications (BU1104).

Introduction To International Relations & Foreign Policy (HA1001).

Introduction to Economic Analysis (EC1101E).

Information and Communication Technology (ICT 133).

Inquiry and Communication in an Interdisciplinary World (CC0001).

> Non-blind spoofing is the easiest type of session hijacking to perform, but it requires attacker to capture packets using Wireshark or TCP dump as they are passing between the two machines. > The attacker can see the traffic that is being sent between the host and the target. The attacker has two options to get the right seq-number,

> Hijacking a TCP session requires an attacker to send a packet with a right seq-number, otherwise, they are dropped. > To effectively hijack a TCP session, you must accurately predict the sequence numbers that are being used between the target and host. Every byte is sequenced, but only the sequence number of the first byte in the segment is put in the TCP header. > Sequence numbers are a 32-bit field in the TCP header. > In TCP-based applications, sequence numbers inform the receiving machine which order to put the packets in if they are received out of order.

> With TCP session hijacking, the attacker takes over an already-authenticated host as it communicates with the target.

With IP spoofing, you still need to authenticate to the target. > TCP session hijacking is different from IP spoofing, in which you spoof an IP address or MAC address of another host. > TCP Session hijacking is the attempt to overtake an already active session between two hosts.

Session hijacking using wireshark