Web Security: Common Vulnerabilities And Their Mitigation - Session hijacking - sidejacking, XSS and malware

The video tutorial discusses session side jacking, a technique involving packet sniffing to access session cookies, particularly in unsecured Wi-Fi hotspots. It emphasizes the importance of encrypting all data between server and client to prevent such attacks. The tutorial also covers cross site scripting, which can compromise session IDs, and highlights the risks posed by malware and user practices. The video concludes with a summary of session hijacking methods.

What is session side jacking and how does it occur?

What measures can a website developer take to protect against session side jacking?

Explain how cross site scripting can compromise session IDs.

What role does malware play in compromising session IDs?

Discuss the limitations of a website developer in preventing session ID theft.