session hijacking

An attack that attempts to impersonate a user by capturing and using a session ID. Session IDs are stored in cookies.